Skip to content

v5.5.3

Compare
Choose a tag to compare
@vinnybod vinnybod released this 20 Jul 05:29
d3a4d17

[5.5.3] - 2023-07-20

  • Updated Starkiller to v2.4.2
  • Updated restip message to show IP address on server (@Cx01N)
  • Fixed onedrive taskings for powershell (@Cx01N)
  • Update pyyaml to 6.0.1 to avoid build issue from cython (@vinnybod)
  • Use MariaDB in Debian (@vinnybod)

[5.5.2] - 2023-07-14

  • Fix TypeError and crash when using main command in client (@jellyjellyrobot)
  • Fix extraneous semi-colon breaking powershell 'literal' execution (@crittico)

[5.5.1] - 2023-07-06

  • Fix basic_reporting plugin using the wrong agent checkin column

[5.5.0] - 2023-06-21

  • Break out agent checkins to a new table (@vinnybod)
    • New checkins endpoint to get them as a list
    • New checkins aggregate endpoint to get aggregated checkin data
    • Aggregate endpoint not supported with SQLite
  • Add a warning message about using SQLite
  • Added LinPEAS to Python modules (@Cx01N)
  • Added python obfusscation using python-obfuscator (@Cx01N)
  • Added IronPython SMB Agents/Listener (@Cx01N)
  • Expand file options to plugins, stagers, and listeners (@vinnybod)
  • Added Python agent support to hop listener (@Cx01N)
  • Added staging to hop listener (@Cx01N)
  • Added python module for Pwnkit (CVE-2021-4034) (@Cx01N)
  • Added python module for Polkit (CVE-2021-3560) (@Cx01N)
  • Fixed safecheck error for python module sudo spawn (@Cx01N)
  • Fixed file error in Invoke-Shellcode (@Cx01N)
  • Removed duplicate modules between languages (@Cx01N)
    • Removed .NET Core modules due to errors
    • Removed redundant C# lateral movement modules
    • Removed Covenant Mimikatz in favor of Invoke-Mimikatz
    • Removed Invoke-Assembly in favor of Covenant's execute assembly
    • Removed Invoke-BOF in favor of RunOF
    • Removed Invoke-Rubeus in favor of Covenant's Rubeus
    • Removed Invoke-Seatbelt in favor of Covenant's Seatbelt
    • Removed Bloodhound v1 module
  • Revamped malleable profiles and increased their generation reliability (@Cx01N)
  • Allow the server to start even when starkiller sync fails (@vinnybod)
  • Remove libssl1.1 from the install script since it doesn't appear to be needed and causes install failures on some OS (@vinnybod)
  • Fix the restip argument which wasn't being used (@vinnybod)
  • Added reload endpoint to Malleable Profiles, Modules, Bypasses, and Plugins (@Cx01N)
  • Updated and fixed pyinstaller stager (@Cx01N)