security enabled verified high v1.0.0

empire

PowerShell-based post-exploitation framework for staged and stageless payloads with encrypted C2 communication.

📋 Live Preview 
empire server
empire server

Sandbox: execFile · Timeout: 600s

Capabilities

post.exploitation
agent.communication
payload.generation
credential.dumping
privilege.escalation

Parameters

Name Type Required Default Description Aliases
subcommand string Yes - Subcommand: server, client, reset, --help
username string No - Username for authentication --username
password string No - Password for authentication --password
port integer No - Server listener port --port
flag-c string No - Config file path -c, --config
flag-d boolean No - Debug mode -d, --debug
flag-v boolean No - Verbose output -v, --verbose
restip string No - RESTful API bind IP --restip
headless boolean No - Run without interactive console --headless
launcher string No - Launcher stager type --launcher
flag-ip string No - Listener IP address --ip
profile string No - Listener profile name --profile
help boolean No - Show this help message --help

Contract

Inputs

network.target.ip

Listener IP address

network.port.number

Listener port

stager.type

Stager type (dll, launcher, macro, etc.)

Outputs

command.session

Encrypted C2 agent session

credential.data

Dumped credentials

Side effects: network_trafficprocess_spawnfilesystem_write

Workflow Edges

Produces

command.sessioncredential.data

Consumes

network.target.ipnetwork.port.numberstager.type

Resource Profile

ResourceValue
CPUmedium
Memory256 MB
Networkhigh
Disk I/Olow

Examples

Start Empire server

empire server

Start Empire client

empire client

Start server with custom port

empire server --port 443

Start server in headless mode

empire server --headless

Start client with credentials

empire client --username empireadmin --password password123

Server with debug output

empire server -d -v

Server with REST API on custom IP

empire server --restip 10.0.0.1

Documentation

Empire — PowerShell Post-Exploitation Framework

Empire (now maintained as PowerShell Empire) is a pure PowerShell post-exploitation agent framework. It provides encrypted C2 communication, modular stagers, and extensive post-exploitation capabilities built on PowerShell scripting.

Key Features

  • Encrypted C2: Encrypted communication between agents and server
  • Multiple stagers: Dll, launcher, macro, and more
  • Module system: Extensive post-exploitation modules
  • Starkiller UI: Graphical front-end for Empire
  • Multi-platform agents: PowerShell (Windows) and Python (Linux/OSX)
  • Listener profiles: HTTP, HTTPS, and SMB listeners

Architecture

  • Server: Python-based RESTful C2 server
  • Client: PowerShell or python-based agents
  • Starkiller: Vue.js GUI for Empire management
  • Modules: Post-exploitation, credential theft, lateral movement

Dependencies

python3

Related Tools

metasploitslivercovenantstarkiller

References