BC-SECURITY

Starkiller is a Frontend for Empire.

Moriarty is designed to enumerate missing KBs, detect various vulnerabilities, and suggest potential exploits for Privilege Escalation in Windows environments.

Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike & Empire.

Invoke-ZeroLogon allows attackers to impersonate any computer, including the domain controller itself, and execute remote procedure calls on their behalf.

This is a PowerShell Empire launcher PoC using PrintDemon and Faxhell.

DEFCON 27 slides and workshop materials.

IronSharpPack is a repo of popular C# projects that have been embedded into IronPython scripts that execute an AMSI bypass and then reflective load the C# project.

A comprehensive workshop aimed to equip participants with an in-depth understanding of modern Command and Control (C2) concepts, focusing on the open-source Empire C2 framework.

Example code samples from our ScriptBlock Smuggling Blog post