The Empire PowerShell toolkit is an open-source exploitation toolkit/framework similar to Metasploit, differing in its use of PowerShell scripts. The project was released on 30 October 2015 and was discontinued on 31 July 31, 2019. According to their website and GitHub information, “The framework offers cryptographically secure communications and flexible architecture. On the PowerShell side, Empire implements the ability to run PowerShell agents without needing powershell.exe, rapidly deployable post-exploitation modules ranging from keyloggers to Mimikatz, and adaptable communications to evade network detection, all wrapped up in a usability-focused framework.”
Read the full story here:IR-21-228-001-Powershell Empire.pdf
Comments