CHANGELOG.md

Changelog

1.51.1 (2025-01-26)

Bug Fixes

• vaccine installation fails: patchelf not found (315ec2b)

1.51.0 (2025-01-26)

Features

• improve module config structure (e5dea79)
• include listener in releases (f96226d)
• support C2 plugins and module builder (8eba6f5)

Bug Fixes

• stager module should be able to read configurations from env vars (ce22a03)
• crash when using local modules (490f309)
• make use of is_local attribute (2a80931)
• module builder (2751c49)
• module path handling (0a375c8)
• no output from stager (51a99ff)
• refactor C code, integrate stager into one of the modules (a53f78c)
• set env vars for module builder (ba3a10a)

1.50.3 (2025-01-25)

Bug Fixes

• update deps, remove deprecated go-ps (94812c3)

1.50.2 (2025-01-23)

Bug Fixes

• version number not updating (5732f25)

1.50.1 (2025-01-23)

Bug Fixes

• go_lpe takes too long (fdd23b1)
• return process output of in-memory ELF modules (63cd991)

1.50.0 (2025-01-23)

Features

• add ELF in-mem loader for Linux modules (WIP) (5b62db8)
• go_lpe (fd524d0)

Bug Fixes

• consider darwin even we are not supporting it (4a736e2)
• no CGO when building executables (4d73434)
• run ELF in subroutine (91279bf)

1.49.5 (2025-01-22)

Bug Fixes

• use minidump on Windows to be more useful (e5f7ae2)

1.49.4 (2025-01-22)

Bug Fixes

• need a reliable way to check if the agent is run as DLL (330a0b6)

1.49.3 (2025-01-22)

Bug Fixes

• #393 use more precise binary patching for reliable config extraction (88bda6d)

1.49.2 (2025-01-21)

Bug Fixes

• --debug build fails (0eac8a0)
• drop -s when building debug version (20e11e5)
• linux shared libs linked with musl seems broken (360efe8)
• logging not working (6fc43f1)

1.49.1 (2025-01-20)

Bug Fixes

• disable daemonizae in Windows (0902b70)

1.49.0 (2025-01-20)

Features

• support DLL/SO payload types (d8a1c04)

Bug Fixes

• gen_agent module initialization (d652b0e)
• build as windowsgui if target is Windows (33ca2f6)
• copilot deleted my code, fucking retard! (4548470)
• create CGO-enabled agent for DLL/SO types (cd1ad3b)
• deprecate upx, users should deliver compressed payloads by themselves (d10a2f8)
• go-console fails to build for arm64 (5faa4fc)
• redesign modules and fix errors (c90ed00)
• refactor module config structure (bf38b05)
• support more arch for shared obj building (dd16baa)
• support more arch when building linux_so (9a39895)
• use zig to avoid cross-compiling nightmare (a919132)

1.48.10 (2025-01-18)

Bug Fixes

• AddNeededLib no longer depends on patchelf program (5983def)
• do not download file when memdump fails (2445006)

1.48.9 (2025-01-18)

Bug Fixes

• elvish_win not working (2c3ef0d)
• mem_dump should download dumped mem file (3221840)
• agent response too noisy (123258a)
• interactive modules file not found in Windows (7d2e4c8)
• randomize MagicString (4bf2f96)

1.48.8 (2025-01-17)

Bug Fixes

• CLI commands handling refactored (394e5e4)
• command auto-completion broken after selecting a target (8583b2c)
• display cd errors (59d5682)

1.48.7 (2025-01-15)

Bug Fixes

• interactive modules "failed to upload" (924dbca)

1.48.6 (2025-01-15)

Bug Fixes

• make prompt string more informative (7e432d2)

1.48.5 (2025-01-15)

Bug Fixes

• file_manager not starting (8aee534)
• get download progress not showing (4b349cc)
• do not download again if already downloaded and checksum matched (aa9ec97)
• regex filter for recursive downloads (1443b01)

1.48.4 (2025-01-15)

Bug Fixes

• recursive dowloads should retain directory structure (20d8bda)
• should check if any files fail to download in recursive downloads (08427dd)

1.48.3 (2025-01-14)

Bug Fixes

• restrict to 1 task per download for recursive downloads, enforce checksum verification (7f66130)

1.48.2 (2025-01-14)

Bug Fixes

• interactive modules not opening (7ccbefb)

1.48.1 (2025-01-14)

Bug Fixes

• agents get removed because commands timeout (7fc8a23)
• eliminate wait for all commands (2d004fd)
• modules should not block (1655958)
• recursive get, useful when downloading a directory on a target (36696e5)
• sometimes agent can't send back response (d1a0388)

1.48.0 (2025-01-13)

Features

• transparent zstd compression for file downloading from agents (e4144c5)

Bug Fixes

• log filename (8dff46a)
• save agents' output to a log file (d1b19f7)

1.47.1 (2025-01-13)

Bug Fixes

• C2 CLI log is written to unexpected location (332a96b)
• change prompt style when having root access (3a46fd6)
• distinguish types of modules for better handling (4daebde)
• handling of compression of in-mem modules (47c20ae)
• handling of in-memory script modules (f22163a)
• optimize custom module handler (e27a6df)
• python modules broken (11995cb)
• use tmux-256color as recommended by tmux documentation (08da828)

1.47.0 (2025-01-10)

Features

• process mem_dump for Linux and Windows (b8a9822)

Bug Fixes

• file_downloader should have an option to opt out of checksum verification (27529ff)
• file_server http port should be random (b570cd0)
• do not request full path to download (55c463e)

1.46.1 (2025-01-09)

Bug Fixes

• make it possible to download modules from specified agent file server (4f178b5)

1.46.0 (2025-01-09)

Features

• file_downloader that downloads files from agent hosted HTTP server, for data exfiltration, with checksum support (969f153)
• file_server for file transfer between agents (ad83344)

Bug Fixes

• only extract bashrc when needed (d51e78c)

1.45.2 (2025-01-06)

Bug Fixes

• improve downloading from C2, add checksum verification (459bdab)
• redundant port mappings for SSH shells (7c0da2b)

1.45.1 (2025-01-06)

Bug Fixes

• check target OS compatibility before running modules (aac0b85)
• improve module management and code refactoring (656a652)
• update gen_agent help (5db7099)

1.45.0 (2025-01-05)

Features

• add standalone elvish cross-platform shell (a97c51e)

Bug Fixes

• int overflow and build issue (6fe9ee3)

1.44.4 (2025-01-05)

Bug Fixes

• disable automatic vaccine download, it should be run when needed (20037a4)
• ELF header parser (c037902)
• program header parser should run only once (7c8940a)
• unable to find agent executable file when run from loaders (eg. shared lib) (1140a3b)
• verify encrypted config data before using (f716bc6)

1.44.3 (2025-01-03)

Bug Fixes

• upgrade_agent not working (ab296aa)

1.44.2 (2025-01-03)

Bug Fixes

• check if local version is already the latest (0abb4a0)
• installer not run when updating CC (b0f25de)

1.44.1 (2025-01-03)

Bug Fixes

• cli crash (d65907a)
• upload checksum file to release (8d49717)

1.44.0 (2025-01-03)

Features

• enable upgrade_cc command (WIP) (63b2384)

1.43.4 (2025-01-02)

Bug Fixes

• critical bug: NCSI checking prevents proxied agents from getting online (eaede74)

1.43.3 (2025-01-02)

Bug Fixes

• auto completion fix (571fd0c)
• reduce embeded file size using xz (79f76e1)
• remove go-lpe as it's not very useful (756d4ed)

1.43.2 (2024-12-31)

Bug Fixes

• makeTransport takes forever to fail, let's make it 10s top (7ccb64b)
• KCPClient should exit when reverse proxy session ends (51d02e4)
• randomize proxyDialer sleep time (aa212d5)

1.43.1 (2024-12-30)

Bug Fixes

• bring2cc accidentally disabled (ec11524)
• should report C2 transport proxy if it's used (4519725)
• ssh reverse proxy in KCP mode: client port should be renewed with each session (e8b2649)
• ssh reverse proxy in KCP tunnel now working (30935fc)

1.43.0 (2024-12-29)

Features

• add Shadowsocks TCP tunnel support, can be used for port_fwd, C2 transport relaying (bdf9f56)
• broadcasted auto_proxy is now using shadowsocks (b31562b)

Bug Fixes

• add plain HTTP listener (a480f30)
• adjust logging text colors (ba1c133)
• dont print binary data to the terminal (f3603a2)
• exec system commands with args (e41875f)
• high CPU usage by emp3r0r-cat (probably related to #315) (7854a07)
• messy logging in kcptun (ea2aa88)
• ncsi switch broken (90fe415)
• no need to keep validating the reverse proxy when a working proxy is configured (144ca1e)
• turn off NCSI by default (b4c4940)
• unix socket not set up (313b4c9)
• unix socket path not match (3e67009)

1.42.1 (2024-12-28)

Bug Fixes

• ps command output not parsed (7ace03c)
• agent root path searching (aa0941c)

1.42.0 (2024-12-27)

Features

• agent side "listener" for lateral movement and payload delivery (c4b40b8)

Bug Fixes

• add some nil dereference check to improve stability (6710ed7)
• agent path names (2b2773a)
• c2 commands refactor (fb46ae8)
• fs commands (4336af2)
• improve command parsing (e5baccb)
• open sftp in new tmux window to save space (c29b8c1)
• port_fwd should print some feedback (1c6844f)
• UI adjustments and code refactor (f6b2d00)

1.41.0 (2024-12-26)

Features

• support payload compression in stager (97b271a)

Bug Fixes

• stager.so non-debug build lacks AES support (679b755)

1.40.3 (2024-12-25)

Bug Fixes

• unix socket listener may fail when path name is too long (d7c0e98)

1.40.2 (2024-12-25)

Bug Fixes

• agent dies on unix socket error (f0757fe)
• agent wait queue (28dadaa)
• socket listener not running (26802d0)
• unable to run from ELF loader if VERBOSE is false (ad9aab2)

1.40.1 (2024-12-25)

Bug Fixes

• AES decryption in stager (757a386)
• disable damned chunked encoding (b1b0a79)

1.40.0 (2024-12-24)

Features

• add http stager (with AES encryption) and independent HTTP listener (66f4d8c)

1.39.9 (2024-12-21)

Bug Fixes

• new cc_host not added to server cert, old names get repeated (e3ef171)

1.39.8 (2024-12-21)

Bug Fixes

• crash when listing module options (32cdc3d)
• crash when using info with no module selected (a2706c9)
• do not open SFTP pane in Windows (1e6342f)
• only attemp SFTP on Linux (fd36ff9)
• unable to view crash log in C2 client (152ecf5)

1.39.7 (2024-12-20)

Bug Fixes

• argv modification is not needed in Windows (b5915c6)

1.39.6 (2024-12-20)

Bug Fixes

• #345 (b2ea89c)
• compressor issue in arc, sync with upstream (2a18bf8)
• restore patched ELF's timestamps (mtime, atime) (8d7ac5e)
• update loader.so (22eaf46)

1.39.5 (2024-12-19)

Bug Fixes

• __libc_dlopen_mode deprecated in favor of dlopen as libdl.so has been merged into libc.so (5285b93)
• fatal error in unix socket listener (1cd3065)
• more randomized persistence (WIP) (76686b1)
• upgrade golang.org/x/net (78ac77b)

1.39.4 (2024-12-18)

Bug Fixes

• CC has no knowledge of agent root location, causing custom module to fail (ca5f5da)
• chdir error when running custom modules (66a699f)
• collect module output (40fd645)
• no need to compress module when it already exists (54cdd18)

1.39.3 (2024-12-18)

Bug Fixes

• deprecated rand.seed (1515072)
• disable HidePIDs until we find a better way (1fc1494)
• do not create any files in Windows (82975d7)
• dont use .exe for Linux agents (1b55009)
• minor bugs and code optimization (5e72139)
• path searching: crash (e982019)
• path searching: crash (24ff532)
• randomize agent root even more (Linux) (e96511c)
• simple stagers (a6d191d)
• typo in stager name (442252d)
• use shadowsocks with kcptun by default (791736d)

1.39.2 (2024-12-17)

Bug Fixes

• unable to find config data in shellcode mode (d99be9f)

1.39.1 (2024-12-17)

Bug Fixes

• use donut from upstream to support compression and latest features (a212200)

1.39.0 (2024-12-16)

Features

• integrate donut (WIP) (93c76f2)

Bug Fixes

• possible crash (e568438)

1.38.4 (2024-11-23)

Bug Fixes

• module start scripts don't need compression (aa4869f)
• switch to arc as archiver is deprecated (17ed290)
• switch to archives as archiver is deprecated (de0b493)

1.38.3 (2024-10-25)

Bug Fixes

• re-implement kcp C2 based on kcptun, use single UDP connection (331b857)

1.38.2 (2024-10-24)

Bug Fixes

• some traffic bypasses shadowsocks/kcp proxy (a45b14c)

1.38.1 (2024-10-24)

Bug Fixes

• unarchive secure path validation (ce61818)
• Unarchive with archiver/v4 implementation (fc96304)
• add config.json for mimikatz module (a99139c)
• agent root directory missing / (a3ef9b4)
• make sure stdin closes (a328ea8)
• mimikatz's documentation (3741b36)
• permission error for Linux modules (bf0ab59)
• remove archiver/v3 (#318) (03e6367)
• use Go's built-in filepath sanitization (db76751)
• verbose (9786e1f)

1.38.0 (2024-10-23)

Features

• add mimikatz (no AV evasion) (f1a44fc)
• support in-memory ps1 modules (959517b)

Bug Fixes

• agent root naming in Windows (ff6ee40)
• in-memory execution of ps1 modules (d755ae6)

1.37.8 (2024-10-21)

Bug Fixes

• release-please: switch to tar.zst (d430c7d)

1.37.7 (2024-10-21)

Bug Fixes

• build: switch to zstd (d7e1eeb)
• update deps (f4b177f)
• use trusted built-in CA pool (8ae44f0)

1.37.6 (2024-10-20)

Bug Fixes

• deprecate MS NCSI as it doesn't support HTTPS (62f2115)

1.37.5 (2024-10-20)

Bug Fixes

• req verification for DownloadViaCC (e40db33)

1.37.4 (2024-09-23)

Bug Fixes

• #318 (ac2a682)
• delete orphaned functions (7b744c1)

1.37.3 (2024-09-23)

Bug Fixes

• AES encryption: use GCM for authentication (e713898)
• agent authentication (a2386e2)
• typo (326461c)

1.37.2 (2024-09-17)

Bug Fixes

• some crypto functions (e425081)

1.37.1 (2024-04-21)

Bug Fixes

• update deps (f401df2)

1.37.0 (2024-04-03)

Features

• deprecate gen_agent cmd in favor of use gen_agent module (add0a7e)

Bug Fixes

• __libc_dlopen_mode not found (322d071)
• throw error if shellcode is empty (06b6549)
• update deps (298f87c)

1.36.0 (2024-01-31)

Features

• module help for gen_agent (ea3cfe7)

Bug Fixes

• gen_agent should abort when OS choice is invalid (a8c2142)
• auto-complete gen_agent module options (71e7d79)
• do not prompt for indicator text when it's disabled (f6e8c62)
• reduce CPU load (2f5ed34)

1.35.3 (2024-01-30)

Bug Fixes

• long lines in System Info pane (ef6f1d9)
• panic on HTTP2 server (45d0ff7)

1.35.2 (2024-01-30)

Bug Fixes

• #292 DLL agent (dddd442)

1.35.1 (2024-01-29)

Bug Fixes

• igonore cmdline args when run as DLL (4dd830e)

1.35.0 (2024-01-24)

Features

• support DLL agent stub (amd64 only) (eda0e94)

Bug Fixes

• -gencert refuses to work when emp3r0r.json not found (f100936)
• refactor: merge Linux/Windows agent code (db70d70)

1.34.10 (2024-01-22)

Bug Fixes

• tmux keeps switching back to home window (ad9d887)

1.34.9 (2024-01-22)

Bug Fixes

• #244 (50a0221)
• agent system info pane not being updated (5e9a8ab)
• remove unnecessary colors in "system info" (ca14ba1)
• word wrapping issues (9ab1786)

1.34.8 (2024-01-19)

Bug Fixes

• CC unable to detect existing instance (15e2940)
• incomplete downloads cannot be resumed (bbd57f9)

1.34.7 (2024-01-18)

Bug Fixes

• connectivity check should connect to C2 using uTLS (8b746c5)

1.34.6 (2024-01-17)

Bug Fixes

• passProxy proxy URL parsing error (957395e)

1.34.5 (2024-01-17)

Bug Fixes

• bring2cc fails to connect configure SOCKS5 proxy (d11c8f0)
• bring2cc should start SOCKS5 server automatically (48b7311)
• auto proxy broken (7b04571)

1.34.4 (2024-01-16)

Bug Fixes

• -connect_relay unable to recovery SSH session (8bde2fb)

1.34.3 (2024-01-16)

Bug Fixes

• agent aborts connection (Windows) (8c73193)
• agent aborts connection when C2 is unreachable (def1b2a)
• show C2 address in agent system info (7032d34)
• ssh C2 relay client should retry connection until SSH session is established (966147b)

1.34.2 (2024-01-13)

Bug Fixes

• add instructions (c051806)
• emp3r0r should exit after executing -gencert (33edc36)

1.34.1 (2024-01-13)

Bug Fixes

• C2 relay client (7e121d6)
• C2 relay: C2 service not running (4a26931)

1.34.0 (2024-01-13)

Features

• C2 relay via SSH (522b6b3)

1.33.5 (2024-01-11)

Bug Fixes

• bash stager unable to execute agent (f406100)
• help user understand how stager URL works (71905e5)
• prefer custom bash binary (9c13feb)
• update deps (2aabc1e)
• use base64 encoding for bash stager (4d9657c)

1.33.4 (2023-12-25)

Bug Fixes

• no error reported when lpe_helper fails (39284ab)
• scripts unable to run (32a808a)
• tmux history length too small (c15fe26)
• winpeas: support both ps1 and batch format (0ebd71c)

1.33.3 (2023-12-25)

Bug Fixes

• go-console fails to start winpty (e7e2939)

1.33.2 (2023-12-25)

Bug Fixes

• lpe_winpeas for Windows LPE (a79f8a2)
• split-window -l needs % to specify percentage (266f195)
• split-window -p <size> has been deprecated in tmux newer versions (d625d87)
• trying to obtain output (b90975f)

1.33.1 (2023-12-22)

Bug Fixes

• lpe_linpeas unable to run (a32187f)

1.33.0 (2023-12-22)

Features

• remove shell pane (86851d2)
• revamp lpe_helper (94d3601)

Bug Fixes

• grab creates on-disk file even if no path is specified (dfbf640)
• tmux config: status bar scripts not working (db9ba69)

1.32.5 (2023-12-22)

Bug Fixes

• 1. option to disable NCSI check 2. upgrade deps (5a14b7a)

1.32.4 (2023-11-23)

Bug Fixes

• #250 (c01340d)

1.32.3 (2023-11-22)

Bug Fixes

• #248 (e89155d)

1.32.2 (2023-11-02)

Bug Fixes

• FileBaseName needs to strip / (4eca34b)

1.32.1 (2023-10-11)

Bug Fixes

• #264 add option to disable timeout in proxy altogether (e8b31e5)
• #264 disable timeout and leave cleanup job to the OS (d3cea97)

1.32.0 (2023-10-10)

Features

• upgrade tmux config (d5fc0d0)

Bug Fixes

• #264 increase timeout to 2 minutes (cc7034d)

1.31.12 (2023-10-08)

Bug Fixes

• upgrade mholt/archiver (898e4a4)

1.31.11 (2023-10-08)

Bug Fixes

• security issue in archiver (ffd261e)

1.31.10 (2023-09-21)

Bug Fixes

• inaccurate waitqueue count (4eeacf6)
• persistence using profiles (#260) (409f51c)

1.31.9 (2023-09-20)

Bug Fixes

• #253 (2ebb6f4)
• #254 (a9f3674)

1.31.8 (2023-09-07)

Bug Fixes

• #250 fork not supported on arm64 (d962876)

1.31.7 (2023-09-07)

Bug Fixes

• #250 (99b2fb0)

1.31.6 (2023-09-03)

Bug Fixes

• handle AES decryption panic (48e362e)

1.31.5 (2023-08-10)

Bug Fixes

• #246 (da2bfd1)

1.31.4 (2023-08-04)

Bug Fixes

• run_as_daemon should always be enabled (11a3979)
• loader.so should return error for non-amd64 (4170414)

1.31.3 (2023-08-04)

Bug Fixes

• do not delay when started by loader.so (ca596e9)

1.31.2 (2023-08-03)

Bug Fixes

• do not attemp to hide without root (b69f6b1)
• loader.so unable to find exe due to malformed path name (eec2dcc)
• sometimes CA cert is not added to agent config (a003cd0)
• use bash shell when started by loader.so (d12bda5)

1.31.1 (2023-08-02)

Bug Fixes

• VERBOSE=true not working (b7894c4)
• auto-updating hide_pid list (7a2d822)
• be silent when started by loader.so (4113d3d)
• do not overwrite backup (ef0b058)
• hidden_pids list gets overwritten (fbf7c9c)
• sort hidden_pids list (a63dcef)
• unable to read config when started by loader.so (9074fc4)

1.31.0 (2023-08-02)

Features

• hide PIDs and files using loader.so (c54c5f5)

1.30.5 (2023-07-19)

Bug Fixes

• #236 (84e1fda)
• label by tag not working (131d84e)
• UUID is all zero for Windows (fd487d6)

1.30.4 (2023-07-15)

Bug Fixes

• add option to uninstall (e1a4e0d)

1.30.3 (2023-07-12)

Bug Fixes

• check if an ELF is static (d574330)
• module unpack using xz (177eaa2)
• pack modules with xz, reduce size even more (955b6bd)
• patch static ELFs and patchelf itself (286ddfb)

1.30.2 (2023-07-12)

Bug Fixes

• run path error (773ee53)

1.30.1 (2023-07-11)

Bug Fixes

• add libexpat.so.1 as python needs it (76a9acf)
• too many python files, and libs not added (7757097)

1.30.0 (2023-07-11)

Features

• reduce size of vaccine (c560dbb)

1.29.7 (2023-06-30)

Bug Fixes

• agent wait queue (f4e45f7)

1.29.6 (2023-06-30)

Bug Fixes

• IsAgentAlive stuck (2792bf3)
• profiles persistence method (6321b3c)
• guadian shellcode unable to start agent (9b81317)
• guardian shellcode: restore original binary (a07b280)
• let user choose to inject existing lib/sc (47fd9e6)
• optimize profiles persistence (963ba13)
• remove injector in get_persistence, etc (f7e04b1)

1.29.5 (2023-06-28)

Bug Fixes

• change process name affects loader.so (83c1109)
• elf loader unable to run emp3r0r (d534359)
• outdated loader.so (3ee239e)
• process renaming can't start new process (2ca3fc1)

1.29.4 (2023-06-27)

Bug Fixes

• build issue (67eb322)
• loader.so extraction error (03fde3d)

1.29.3 (2023-06-27)

Bug Fixes

• inject_loader fails to launch agent (77c445b)

1.29.2 (2023-06-26)

Bug Fixes

• get_persistence: fix profiles method (7a1858e)
• add help to get_persistence (a5a9879)
• argv spoofing only works with long argv0 (0f322bf)
• cleanup queue when there are too many waiting (3933766)
• daemonizing issues (argv modification fails) (d005862)
• don't install to all locations at once (87f1ebb)
• inject_loader (694fa31)

1.29.1 (2023-06-25)

Bug Fixes

• #219 (f0b414a)
• get_persistence causes unalias error (43dc8ee)
• get_persistence result readability issue (438289f)
• damonize and be silent when started by persistence script (e14f3eb)

1.29.0 (2023-06-21)

Features

• switch to utls to defeat JA3 fingerprinting (b9bf54f)

1.28.0 (2023-05-24)

Features

• add ssh_harvester (6a557e1)
• inject arbitrary shared lib (f4a0c1c)

Bug Fixes

• unable to log to file (55c4f7b)

1.27.3 (2023-05-15)

Bug Fixes

• #210 (f926d83)
• BlackArch PKGBUILD (5cc5d1f)

1.27.2 (2023-05-05)

Bug Fixes

• improve upgrade_agent (a80f30b)
• panic: nil ref when UDP port_fwd session dies (0cd3746)

1.27.1 (2023-05-04)

Bug Fixes

• UDP forwarding (c462312)

1.27.0 (2023-05-04)

Features

• UDP port mapping (c2b6b32)

Bug Fixes

• command time msg should exclude built-in cmds (e6a5d2d)
• portfwd timeout implementation (b22e91d)
• reduce noisy logging for debug level 2 (56b3d9a)
• remove redundant cmdline args (a2ee4f1)
• timeout connections for socks5 proxy (1b4c6ca)

1.26.8 (2023-04-21)

Bug Fixes

• use command should show more info about the selected module (e04dc5b)
• agent side SOCKS5 server lacks authentication (67cba96)

1.26.7 (2023-04-19)

Bug Fixes

• #201, use winpty to support ConPTY shell on all Windows versions (dfc54c0)
• upgrade dependencies (069484a)

1.26.6 (2023-04-18)

Bug Fixes

• #203 (972664a)

1.26.5 (2023-04-18)

Bug Fixes

• auto-resize console buffer on elvsh start, to match C2 terminal size (71167e4)
• improve PATH handling on Windows/Linux (dfcf572)

1.26.4 (2023-04-14)

Bug Fixes

• #199 (7591681)

1.26.3 (2023-04-14)

Bug Fixes

• #192 (18e2a9b)

1.26.2 (2023-04-14)

Bug Fixes

• #196 (1ec35ca)
• elvsh shell cant start due to missing agent binary (c090e08)
• DownloadViaCC has racing issue (0d96ca8)
• timeout kill should not happen with cmds like get (9ddf659)

1.26.1 (2023-04-13)

Bug Fixes

• mips builds missing (dd9eed5)
• multi-arch build, cc crash on start (fb04c2c)

1.26.0 (2023-04-13)

Features

• multi-arch support (40bc0fe)

Bug Fixes

• confusion on reverse_proxy feature, see #190 (b6425f0)
• incomplete file download percentage (b4e120e)
• syscall.Dup2 not ready for multi-arch support (13826d2)

1.25.8 (2023-04-04)

Bug Fixes

• file downloading progress might stuck at 100% when connection is interrupted (37eabb2)

1.25.7 (2023-04-03)

Bug Fixes

• disable console resizing for windows due to bugs (19e7a88)
• improve file downloading feature (2ec7f02)

1.25.6 (2023-04-02)

Bug Fixes

• c2 server no longer needs to be manually restarted when new c2 name is added (8d9a81b)

1.25.5 (2023-03-31)

Bug Fixes

• disable sysinfo warnings (e7e07a2)
• log requests to stager HTTP server (787344d)
• no need to remove in python stager (09c1c03)
• unable to read mac addr in kvm machines (virtio NIC) (58ed35a)

1.25.4 (2023-03-30)

Bug Fixes

• disable agent logging by default (687230c)
• run modules without specifying target (8630a24)
• stager content should be copied to clipboard automatically when possible (0425501)

1.25.3 (2023-03-30)

Bug Fixes

• existing stager HTTP server should shutdown gracefully when a new stager is requested (54005d8)
• python stager not working and not secure (4962cd8)

1.25.2 (2023-03-29)

Bug Fixes

• cleanup work for stager, python2, obfuscate agent binary (e91f583)
• dynamic prompt string not available after CliAsk or CliYesNo (85e6eba)
• write back agent binary so elvsh can still start (9966d53)

1.25.1 (2023-03-24)

Bug Fixes

• linux/bash stager serving: incorrect path (0f1b33f)
• linux agent proc renaming when using linux/bash stager (575777f)

1.25.0 (2023-03-24)

Features

• implement basic stager (linux/bash) (9f4f9ba)

1.24.2 (2023-03-19)

Bug Fixes

• agent won't run when packed by upx (4d35ef9)

1.24.1 (2023-03-17)

Bug Fixes

• elvsh shell for windows (e4d97d8)
• PATH env should contain sbin paths (4036968)

1.24.0 (2023-03-17)

Features

• add elvsh as default shell (12eba72)

Bug Fixes

• elvsh not working in ssh (18773eb)
• elvsh should reuse sftp port (8d8c99d)
• elvsh: disable daemon (96e5293)
• remove vim command in favor of file_manager (6164d95)

1.23.6 (2023-03-17)

Bug Fixes

• interactive_shell cmd env (fc386ab)
• interactive_shell fails to execute due to empty argv (5b7e397)
• concurrent map access in handshake thread (1adbb47)

1.23.5 (2023-03-16)

Bug Fixes

• /bin/bash doesnt exist on some systems (794887f)
• auto-modify cmdline args (linux) (b4ca3a3)

1.23.4 (2023-02-22)

Bug Fixes

• embeded bash binary won't run, throws SEGV (9fca402)

1.23.3 (2023-02-22)

Bug Fixes

• #152: drop extension name for Linux agent binary (79dfba2)
• agent fails to connect on first try (1675de9)
• report arp cache (658c823)

1.23.2 (2023-02-20)

Bug Fixes

• go get -u (8c90301)

1.23.1 (2023-02-20)

Bug Fixes

• remove packer (713e725)
• upgrade deps (441b978)

1.23.0 (2023-01-04)

Features

• ditch static magic string for packer (f7edcc6)
• improve agent binary structure (fd76e5c)
• pack agent binary by default (linux) (4811229)
• use AES-CBC mode to support tiny-AES (72c4cea)

Bug Fixes

• make bash command line look normal (2315c96)
• xz should be single-threaded (4056da9)

1.22.3 (2022-10-01)

Bug Fixes

• sftp improvements (80deffd)
• sftp pane not opening (82e2fc5)

1.22.2 (2022-09-30)

Bug Fixes

• broken shell pane for windows targets (3cbd03a)

1.22.1 (2022-09-30)

Bug Fixes

• tmux pane resizing issues (7849902)

1.22.0 (2022-09-30)

Features

• sftp support (9b84eb9)

1.21.0 (2022-09-29)

Features

• autocomplete items in PATH on target system (a1a6268)

Bug Fixes

• empty agent uuid (416aadc)
• fail to check command output from agent, agent then gets marked as unresponsive incorrectly (14553b6)
• lengthy log (a3e2f72)
• screenshot downloading fails (886e864)

1.20.0 (2022-09-28)

Features

• enable tabbed UI, move agentlist to tab (7417076)

Bug Fixes

• confusing tmux error messages (1edb75b)
• killing non-existent processes (03fdf33)
• premature downloading from agent side, '.downloading' file not removed (b4598d5)

1.19.1 (2022-09-09)

Bug Fixes

• sanitize filename (33f724e)

1.19.0 (2022-09-09)

Features

• fixed #160, file server rewritten, allow only connected agents to download files from CC (cafeb9d)

Bug Fixes

• use fallback UUID when unable to obtain product serial (bbbfd73)

1.18.0 (2022-08-18)

Features

• bash dropper (79406ed)

1.17.5 (2022-08-15)

Bug Fixes

• optimize build script (3ebbee9)
• smaller tar archive (07e6e9e)

1.17.4 (2022-07-16)

Bug Fixes

• 149 (04188f7)

1.17.3 (2022-06-09)

Bug Fixes

• race condition in polling (0caba63)

1.17.2 (2022-06-08)

Bug Fixes

• #139 linux cmd exec (eb73ec5)

1.17.1 (2022-06-08)

Bug Fixes

• #139 (77c5d3c)

1.17.0 (2022-06-08)

Features

• #163 support quoted and escaped commands (dddfd5c)

1.16.2 (2022-06-07)

Bug Fixes

• #136 (f433a7f)
• conhost.exe cannot exec commands on Windows 7 (5107eb7)

1.16.1 (2022-05-18)

Bug Fixes

• race condition in polling (b3d4a20)

1.16.0 (2022-05-17)

Features

• enable logging for shadowsocks server when debug level is set to 3 (4d79ea9)

1.15.9 (2022-04-19)

Bug Fixes

• command pane remains after exiting emp3r0r (ed3cf1c)
• selected agent not visible as it's on top of the list (48fc9a2)

1.15.8 (2022-04-11)

Bug Fixes

• Tmux UI outputs on wrong panes/windows (b440c60)

1.15.7 (2022-04-11)

Bug Fixes

• #122 title bar height not considered (98cc556)

1.15.6 (2022-04-10)

Bug Fixes

• windows sysinfo (8c7c080)

1.15.5 (2022-04-09)

Bug Fixes

• interactive_shell for Windows: fails to find shell process sometimes (bf1883d)
• interactive_shell for Windows: too many callback functions (1f0155b)

1.15.4 (2022-04-08)

Bug Fixes

• #122 window resizing now works mostly (bb1af5d)

1.15.3 (2022-04-07)

Bug Fixes

• #122 partially fix, shell window in main tmux pane now works (17141b8)

1.15.2 (2022-04-06)

Bug Fixes

• windows interactive_shell has visible console windows (4dfd893)

1.15.1 (2022-04-06)

Bug Fixes

• #94 windows support now complete (d7b812d)

1.15.0 (2022-04-04)

Features

• remove agent on command exec timeout (97eacdb)

1.14.7 (2022-04-02)

Bug Fixes

• #118 implement a 2min timeout in C&C tun (2ecccf6)

1.14.6 (2022-04-02)

Bug Fixes

• cc_indicator option not covered by gen_agent (374ad67)
• logging level in checkinHandler (ea06c68)

1.14.5 (2022-04-01)

Bug Fixes

• address #45, do not start socks5 proxy unless told to (e9deb8e)

1.14.4 (2022-04-01)

Bug Fixes

• garble -tiny build in build script (b643875)

1.14.3 (2022-04-01)

Bug Fixes

• vaccine fails to configure on agent start (c74e7fb)

1.14.2 (2022-04-01)

Bug Fixes

• emp3r0r --release cannot build agent stub (a277515)

1.14.1 (2022-04-01)

Bug Fixes

• agent not reconnecting immediately after losing connection (59eaa1f)
• ConnectCC stucks when using KCP (58d5f89)
• ConnectCC timeout not implemented correctly (d58ac5e)
• KCPClient crash (f5202ef)
• KCPClient not aware of C2 disconnection (58a63a2)
• timeout TLS handshake, do not wait infinitely (24dd54f)

1.14.0 (2022-03-31)

Features

• add verification to handshake process (6a9fc04)

1.13.0 (2022-03-31)

Features

• add KCP C2 transport (d33c9a1)
• add KCP transport, C2 traffic in obfuscated and fast UDP (024543e)

1.12.0 (2022-03-30)

Features

• randomize heartbeat payload length (920d01d)
• reduce and randomize C2 heart-beat traffic, may cause longer wait time in agent state checking (dee4b30)

Bug Fixes

• agent does not connect immediately after checking in (afa4bff)
• agent re-connection takes too long (4febec6)
• alert user only when the agent is connected correctly (44ee708)
• line wrapping in CliPrettyPrint (f406224)
• line wrapping in agent list brings extra whitespaces (3a03153)
• line wrapping inside tables (5f6b3db)
• RandStr not random enough with time.Now as seed (e3aed62)
• some values in emp3r0r.json are not updated (70c0f5e)

1.11.0 (2022-03-29)

Features

• add shadowsocks (a8117e9)
• Add Shadowsocks obfuscator to C2 transport (73a4d67)
• use upx to further compress packed agent binaries (1c6800f)

Bug Fixes

• garble -tiny now works (3c1b9b3)

1.10.7 (2022-03-28)

Bug Fixes

• empty envv when started from memfd_exec (f6a6b7d)
• packer: pass config data and ELF through envv (b6a0d7b)

1.10.6 (2022-03-27)

Bug Fixes

• #105 (32d88f7)
• #105, show C2 names in cowsay (d76e7cb)

1.10.5 (2022-03-26)

Bug Fixes

• PKGBUILD for blackarch (e496738)

1.10.4 (2022-03-25)

Bug Fixes

• unable to execute cat since PATH is not set (5049837)

1.10.3 (2022-03-25)

Bug Fixes

• filename autocompletion for packer (1a9d180)
• make packed binaries executable by default (5d2c944)
• packed agent cannot find config data (e621808)
• packer blocks UI (6788b35)
• reduce packer_stub binary size (c67fff9)
• reduce size of data package (c441325)
• unable to extract config data when agent is packed (c8b5198)
• unable to extract data from file/mem (eff9574)
• unable to extract embeded json config (1c80ec8)

1.10.2 (2022-03-25)

Bug Fixes

• emp3r0r --release fails to build packer_stub (5dd8f99)

1.10.1 (2022-03-24)

Bug Fixes

• packer_stub.exe path (7b7a2d7)

1.10.0 (2022-03-24)

Features

• check if agent is started by ELF loader by PATH hash (2df3c1d)
• integrate packer into C2 (c81cd7d)

Bug Fixes

• pack_agent command (7d2dcea)

1.9.0 (2022-03-23)

Features

• emp3r0r installer (f126780)
• install emp3r0r to your system, load custom modules from ~/.emp3r0r (77f1564)
• use colored print for all fatal errors (9933d86)

Bug Fixes

• cannot pack custom modules due to incorrect path (c535350)
• emp3r0r launcher/installer path error (e4e7a91)
• gen_agent: binaries not found (31b68d1)
• modules don't load (7bac146)
• path errors (70d8362)
• set correct location for tmux scripts (a58c1a3)

1.8.1 (2022-03-22)

Bug Fixes

• 'unknown_host' in agent tag (1aa8eb4)
• no build option for Windows (9c7d22d)
• reduce agent binary size for windows version (9a486f7)

1.8.0 (2022-03-22)

Features

• Add cross-platform support (666051d)
• recognize more linux distros, and get vendor name (5f4df0d)

Bug Fixes

• remove binary from source tree (c5955b8)

1.7.6 (2022-03-20)

Bug Fixes

• ssh shell fails to start due to 'already bind' error (18004a9)
• unable to config time intervals (b242e80)

1.7.5 (2022-03-20)

Bug Fixes

• #89 (1e1b838)

1.7.4 (2022-03-20)

Bug Fixes

• abort when CA is not added (3edca43)
• CA cert missing (b1885b9)

1.7.3 (2022-03-20)

Bug Fixes

• disable CGO to build static binaries (f12190f)

1.7.2 (2022-03-20)

Bug Fixes

• binaries not added in archive (7383bd7)

1.7.1 (2022-03-20)

Bug Fixes

• build script typo, archive structure (ced5651)

1.7.0 (2022-03-20)

Features

• improved C2 launcher, auto-build working (b33aa19)

1.6.13 (2022-03-20)

Bug Fixes

• upload.sh (ad2315b)

1.6.12 (2022-03-20)

Bug Fixes

• test a new release (6632334)

1.6.11 (2022-03-20)

Bug Fixes

• save some time if release not created (2dc20ef)

1.6.10 (2022-03-20)

Bug Fixes

• curl cmd in workflow file (db91dd2)

1.6.9 (2022-03-20)

Bug Fixes

• curl upload asset (058a637)

1.6.8 (2022-03-20)

Bug Fixes

• upload assets: not found (2d87428)

1.6.7 (2022-03-20)

Bug Fixes

• upload assets (c9fb994)

1.6.6 (2022-03-20)

Bug Fixes

• workflow steps (3a3b0bd)

1.6.5 (2022-03-20)

Bug Fixes

• upload-asset: file not found (a3a6c10)

1.6.4 (2022-03-20)

Bug Fixes

• trying to upload assets (8fb049d)

1.6.2 (2022-03-20)

Bug Fixes

• need to check out repo before creating release archive (dc3947b)

1.6.1 (2022-03-20)

Bug Fixes

• update go dependencies (018b533)

1.6.0 (2022-03-18)

Features

• implement build.py in CC (4d237b0)

Bug Fixes

• build --clean success message (6eebb2b)
• build.py --target clean deletes everything (6842acc)
• ca key file name (5547eed)
• CliAsk: ignore ctrl-c and EOF (85180af)
• disallow empty input (2c3c76d)
• emp3r0r.json initialization not complete (6369379)
• init emp3r0r.json when it's not found (1aed32c)
• toggle some config options on/off (abe600f)

1.5.1 (2022-03-17)

Bug Fixes

• gen_agent: build stub.exe first (ae01a32)

1.5.0 (2022-03-17)

Features

• build system redesigned (38cfd9f)
• build.py now generates stub.exe (3dd2009)
• change build process (a5fc6eb)
• cmd handler is blocking most commands (c500a6e)
• do not pack agent binaries (d65e675)
• generate agent id from host config (1bf31c2)
• remove windows support (3a9660e)
• rename outfile (5512998)

Bug Fixes

• emp3r0r.json: socket name (f6c42a9)
• file paths (284f161)
• gen_agent command (3121a59)
• magic string should be pre-set (9dd87a9)
• no need to decompress (eb231e9)
• python path (a437008)
• rm redundant build function (cbaa7e7)
• should rm python archive (68deedd)
• tmux cat (8d8a3c8)
• update build.py to match build dir change (0142126)
• update c2 launcher (406b1bf)
• update launcher (22b4078)
• utils_path and socket name should follow agent_root (fe514b7)

1.4.1 (2022-03-16)

Bug Fixes

• onion address checking (628d527)
• print 'go build ends' after go build (a73ff81)
• restore source files when build is aborted (07ab26c)

1.4.0 (2022-03-16)

Features

• add cowsay (74be24c)

Bug Fixes

• C2 prints the wrong version string (a59e18c)
• LD_LIBRARY_PATH was mistakenly unset (0cd3f3e)
• missing file in dockerscan libs (7a49ed7)

1.3.20 (2022-03-15)

Bug Fixes

• clear changlog (88b425a)