BC-SECURITY/Empire v5.8.1

on GitHub

[5.8.1] - 2023-11-30

• Updated Starkiller to v2.7.1

Added

• Add tags search to credentials endpoints (@vinnybod)
• Allow Starkiller to be disabled (@vinnybod)
• Allow API port to be configured from the config.yaml (@vinnybod)
• Add flake8-comprehensions rules to ruff config (@vinnybod)

Changed

• Upgrade Pydantic to v2 (@vinnybod)
• Update common FastAPI Dependencies to use 'Annotated' types for simpler code (@vinnybod)
• Simplify TestClient setup (@vinnybod)
• Removed usages of deprecated Credentials and Listeners functions (@vinnybod)
• Remove usages of deprecated Agents functions (@vinnybod)
• Add typehinting for MainMenu object in modules (@vinnybod)
• Removed name property from listener start and shutdown functions (@vinnybod)
• Removed secretsocks as dependency for Python agents (@Cx01N)

Removed

• Remove unused migration scripts (@vinnybod)

Fixed

• Fixed the database session management for websocket endpoints (@vinnybod)

[5.8.0] - 2023-11-06

• Warning: You may run into errors installing things such as nim if you are running the install script on a machine that previously ran it. This is due to permissions changes with the install script. In this case it is recommended to use a fresh machine or manually remove the offending directories/files.

Added

• Added automatic tasking for sysinfo for stageless agents (@Cx01N)

Changed

• Modernized the Python and IronPython agents with new agent and staging code (@Cx01N)
• Updated listeners to consistently use port 80 and 443 for HTTP traffic by default (@Cx01N)
• Make the installation of donut conditional on architecture since it doesn't work on ARM (@vinnybod)
  • When donut is invoked but not installed, give a useful warning (@vinnybod)
• Allow a config to be loaded from an outside directory and the downloads/logs/etc to be stored in an outside directory (@vinnybod)
• Correct more deprecation warnings for SQLAlchemy and invalid escape sequences (@vinnybod)
• Updated the ruff minimum Python version to 3.10 and applied fixes to get codebase compliant (@vinnybod)
• Remove unneeded condition statement from all listeners (@vinnybod)
• Update Docker build (@vinnybod)
  • Use the official Poetry installer
  • Fix Starkiller trying to auto-update inside the container
  • Pre-install Starkiller as part of the docker build
  • Use Python 3.12
  • Don't use apt for powershell and dotnet
  • DockerHub images now have linux/amd64 and linux/arm64 architectures
• Dependency changes (@vinnybod)
  • Use BC-Security fork of md2pdf until upstream can support Python 3.12
  • Use a patched version of pysecretsocks that packages asyncore for Python 3.12 support
  • Use docopt-ng for Python 3.12 support
  • Add packaging as a runtime dependency
• Update install script (@vinnybod)
  • Use pyenv to install Python
  • Use the official Poetry installer
  • Don't run the entire script as root
  • Rewrite the test containers and reuse a templated Dockerfile
  • Add Debian12 support
  • Bump all OS to use Python 3.12
  • Refactor the script to be a bit more readable
  • Condense the test_install_script job
  • Added option to start MySQL service on boot (@Cx01N)

Removed

• Drop support for Python 3.8 and 3.9