A post-exploitation framework with PowerShell and Python agents for cryptographically secure communications and flexible modules.
Empire is a post-exploitation framework that includes pure-PowerShell Windows agents and pure Python Linux/OS X agents for security testing. It provides cryptologically-secure communications and a flexible architecture with deployable modules like key loggers and Mimikatz, enabling authorized post-exploitation activities.
Security professionals, penetration testers, and red teamers conducting authorized assessments who need evasion-capable agents and modular post-exploitation tools.
Developers choose Empire for its cryptographically secure communications, ability to run PowerShell agents without powershell.exe for evasion, and a usability-focused framework that integrates both PowerShell and Python agents in one tool.
Empire is a PowerShell and Python post-exploitation agent.
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Empire runs PowerShell agents without powershell.exe, as highlighted in the description, enabling evasion of signature-based detection in Windows environments.
It merges PowerShell and Python agents, providing pure-PowerShell for Windows and pure Python for Linux/OS X, making it versatile for multi-OS red teaming.
The framework emphasizes cryptologically-secure communications, ensuring data protection during post-exploitation activities, as noted in its philosophy.
It includes rapidly deployable modules like key loggers and Mimikatz, allowing for flexible and customizable tooling in security assessments.
Designed for ease of use in security testing scenarios, the framework prioritizes user experience, as mentioned in the key features.
The README states the project is no longer supported, meaning no updates, bug fixes, or security patches, posing risks for modern use.
From version 2.4, Empire only officially supports Kali, Debian, or Ubuntu, restricting deployment in diverse or newer environments.
It relies on Python 2.6/2.7 and PowerShell 2.0, which are deprecated and may have security vulnerabilities or compatibility issues.
Strict contribution rules, such as PowerShell 2.0 compatibility and specific coding standards, can hinder community involvement and initial setup.