%FILES%
usr/
usr/share/
usr/bin/
usr/bin/empire-setup
usr/bin/empire
usr/share/licenses/
usr/share/empire/
usr/share/empire/LICENSE
usr/share/empire/changelog
usr/share/empire/plugins/
usr/share/empire/empire
usr/share/empire/setup/
usr/share/empire/README.md
usr/share/empire/Dockerfile
usr/share/empire/data/
usr/share/empire/VERSION
usr/share/empire/lib/
usr/share/empire/lib/powershell/
usr/share/empire/lib/stagers/
usr/share/empire/lib/__init__.py
usr/share/empire/lib/common/
usr/share/empire/lib/listeners/
usr/share/empire/lib/modules/
usr/share/empire/lib/modules/python/
usr/share/empire/lib/modules/powershell/
usr/share/empire/lib/modules/python_template.py
usr/share/empire/lib/modules/powershell_template.py
usr/share/empire/lib/modules/exfiltration/
usr/share/empire/lib/modules/external/
usr/share/empire/lib/modules/python_jobs_template.py
usr/share/empire/lib/modules/external/generate_agent.py
usr/share/empire/lib/modules/exfiltration/Invoke_ExfilDataToGitHub.py
usr/share/empire/lib/modules/powershell/recon/
usr/share/empire/lib/modules/powershell/persistence/
usr/share/empire/lib/modules/powershell/lateral_movement/
usr/share/empire/lib/modules/powershell/management/
usr/share/empire/lib/modules/powershell/privesc/
usr/share/empire/lib/modules/powershell/situational_awareness/
usr/share/empire/lib/modules/powershell/exfiltration/
usr/share/empire/lib/modules/powershell/trollsploit/
usr/share/empire/lib/modules/powershell/collection/
usr/share/empire/lib/modules/powershell/credentials/
usr/share/empire/lib/modules/powershell/code_execution/
usr/share/empire/lib/modules/powershell/exploitation/
usr/share/empire/lib/modules/powershell/exploitation/exploit_eternalblue.py
usr/share/empire/lib/modules/powershell/exploitation/exploit_jboss.py
usr/share/empire/lib/modules/powershell/exploitation/exploit_jenkins.py
usr/share/empire/lib/modules/powershell/code_execution/invoke_ntsd.py
usr/share/empire/lib/modules/powershell/code_execution/invoke_metasploitpayload.py
usr/share/empire/lib/modules/powershell/code_execution/invoke_dllinjection.py
usr/share/empire/lib/modules/powershell/code_execution/invoke_shellcode.py
usr/share/empire/lib/modules/powershell/code_execution/invoke_reflectivepeinjection.py
usr/share/empire/lib/modules/powershell/code_execution/invoke_shellcodemsil.py
usr/share/empire/lib/modules/powershell/credentials/powerdump.py
usr/share/empire/lib/modules/powershell/credentials/credential_injection.py
usr/share/empire/lib/modules/powershell/credentials/mimikatz/
usr/share/empire/lib/modules/powershell/credentials/enum_cred_store.py
usr/share/empire/lib/modules/powershell/credentials/sessiongopher.py
usr/share/empire/lib/modules/powershell/credentials/invoke_kerberoast.py
usr/share/empire/lib/modules/powershell/credentials/tokens.py
usr/share/empire/lib/modules/powershell/credentials/vault_credential.py
usr/share/empire/lib/modules/powershell/credentials/mimikatz/sam.py
usr/share/empire/lib/modules/powershell/credentials/mimikatz/logonpasswords.py
usr/share/empire/lib/modules/powershell/credentials/mimikatz/keys.py
usr/share/empire/lib/modules/powershell/credentials/mimikatz/silver_ticket.py
usr/share/empire/lib/modules/powershell/credentials/mimikatz/cache.py
usr/share/empire/lib/modules/powershell/credentials/mimikatz/extract_tickets.py
usr/share/empire/lib/modules/powershell/credentials/mimikatz/pth.py
usr/share/empire/lib/modules/powershell/credentials/mimikatz/certs.py
usr/share/empire/lib/modules/powershell/credentials/mimikatz/mimitokens.py
usr/share/empire/lib/modules/powershell/credentials/mimikatz/golden_ticket.py
usr/share/empire/lib/modules/powershell/credentials/mimikatz/dcsync.py
usr/share/empire/lib/modules/powershell/credentials/mimikatz/trust_keys.py
usr/share/empire/lib/modules/powershell/credentials/mimikatz/dcsync_hashdump.py
usr/share/empire/lib/modules/powershell/credentials/mimikatz/lsadump.py
usr/share/empire/lib/modules/powershell/credentials/mimikatz/purge.py
usr/share/empire/lib/modules/powershell/credentials/mimikatz/command.py
usr/share/empire/lib/modules/powershell/collection/minidump.py
usr/share/empire/lib/modules/powershell/collection/netripper.py
usr/share/empire/lib/modules/powershell/collection/prompt.py
usr/share/empire/lib/modules/powershell/collection/ChromeDump.py
usr/share/empire/lib/modules/powershell/collection/get_indexed_item.py
usr/share/empire/lib/modules/powershell/collection/find_interesting_file.py
usr/share/empire/lib/modules/powershell/collection/ninjacopy.py
usr/share/empire/lib/modules/powershell/collection/keylogger.py
usr/share/empire/lib/modules/powershell/collection/clipboard_monitor.py
usr/share/empire/lib/modules/powershell/collection/packet_capture.py
usr/share/empire/lib/modules/powershell/collection/browser_data.py
usr/share/empire/lib/modules/powershell/collection/FoxDump.py
usr/share/empire/lib/modules/powershell/collection/vaults/
usr/share/empire/lib/modules/powershell/collection/USBKeylogger.py
usr/share/empire/lib/modules/powershell/collection/get_sql_query.py
usr/share/empire/lib/modules/powershell/collection/screenshot.py
usr/share/empire/lib/modules/powershell/collection/get_sql_column_sample_data.py
usr/share/empire/lib/modules/powershell/collection/WebcamRecorder.py
usr/share/empire/lib/modules/powershell/collection/file_finder.py
usr/share/empire/lib/modules/powershell/collection/inveigh.py
usr/share/empire/lib/modules/powershell/collection/vaults/add_keepass_config_trigger.py
usr/share/empire/lib/modules/powershell/collection/vaults/remove_keepass_config_trigger.py
usr/share/empire/lib/modules/powershell/collection/vaults/find_keepass_config.py
usr/share/empire/lib/modules/powershell/collection/vaults/keethief.py
usr/share/empire/lib/modules/powershell/collection/vaults/get_keepass_config_trigger.py
usr/share/empire/lib/modules/powershell/trollsploit/rick_astley.py
usr/share/empire/lib/modules/powershell/trollsploit/thunderstruck.py
usr/share/empire/lib/modules/powershell/trollsploit/wallpaper.py
usr/share/empire/lib/modules/powershell/trollsploit/rick_ascii.py
usr/share/empire/lib/modules/powershell/trollsploit/process_killer.py
usr/share/empire/lib/modules/powershell/trollsploit/get_schwifty.py
usr/share/empire/lib/modules/powershell/trollsploit/voicetroll.py
usr/share/empire/lib/modules/powershell/trollsploit/wlmdr.py
usr/share/empire/lib/modules/powershell/trollsploit/message.py
usr/share/empire/lib/modules/powershell/exfiltration/egresscheck.py
usr/share/empire/lib/modules/powershell/exfiltration/exfil_dropbox.py
usr/share/empire/lib/modules/powershell/situational_awareness/network/
usr/share/empire/lib/modules/powershell/situational_awareness/host/
usr/share/empire/lib/modules/powershell/situational_awareness/host/get_pathacl.py
usr/share/empire/lib/modules/powershell/situational_awareness/host/computerdetails.py
usr/share/empire/lib/modules/powershell/situational_awareness/host/winenum.py
usr/share/empire/lib/modules/powershell/situational_awareness/host/get_uaclevel.py
usr/share/empire/lib/modules/powershell/situational_awareness/host/antivirusproduct.py
usr/share/empire/lib/modules/powershell/situational_awareness/host/findtrusteddocuments.py
usr/share/empire/lib/modules/powershell/situational_awareness/host/dnsserver.py
usr/share/empire/lib/modules/powershell/situational_awareness/host/get_proxy.py
usr/share/empire/lib/modules/powershell/situational_awareness/host/monitortcpconnections.py
usr/share/empire/lib/modules/powershell/situational_awareness/host/paranoia.py
usr/share/empire/lib/modules/powershell/situational_awareness/network/arpscan.py
usr/share/empire/lib/modules/powershell/situational_awareness/network/get_sql_server_info.py
usr/share/empire/lib/modules/powershell/situational_awareness/network/bloodhound.py
usr/share/empire/lib/modules/powershell/situational_awareness/network/smbautobrute.py
usr/share/empire/lib/modules/powershell/situational_awareness/network/get_exploitable_system.py
usr/share/empire/lib/modules/powershell/situational_awareness/network/reverse_dns.py
usr/share/empire/lib/modules/powershell/situational_awareness/network/get_sql_instance_domain.py
usr/share/empire/lib/modules/powershell/situational_awareness/network/smbscanner.py
usr/share/empire/lib/modules/powershell/situational_awareness/network/powerview/
usr/share/empire/lib/modules/powershell/situational_awareness/network/get_spn.py
usr/share/empire/lib/modules/powershell/situational_awareness/network/portscan.py
usr/share/empire/lib/modules/powershell/situational_awareness/network/powerview/get_gpo.py
usr/share/empire/lib/modules/powershell/situational_awareness/network/powerview/get_forest.py
usr/share/empire/lib/modules/powershell/situational_awareness/network/powerview/get_loggedon.py
usr/share/empire/lib/modules/powershell/situational_awareness/network/powerview/get_session.py
usr/share/empire/lib/modules/powershell/situational_awareness/network/powerview/find_gpo_computer_admin.py
usr/share/empire/lib/modules/powershell/situational_awareness/network/powerview/share_finder.py
usr/share/empire/lib/modules/powershell/situational_awareness/network/powerview/find_localadmin_access.py
usr/share/empire/lib/modules/powershell/situational_awareness/network/powerview/get_dfs_share.py
usr/share/empire/lib/modules/powershell/situational_awareness/network/powerview/find_foreign_group.py
usr/share/empire/lib/modules/powershell/situational_awareness/network/powerview/get_object_acl.py
usr/share/empire/lib/modules/powershell/situational_awareness/network/powerview/find_managed_security_group.py
usr/share/empire/lib/modules/powershell/situational_awareness/network/powerview/get_site.py
usr/share/empire/lib/modules/powershell/situational_awareness/network/powerview/get_domain_trust.py
usr/share/empire/lib/modules/powershell/situational_awareness/network/powerview/get_user.py
usr/share/empire/lib/modules/powershell/situational_awareness/network/powerview/find_foreign_user.py
usr/share/empire/lib/modules/powershell/situational_awareness/network/powerview/get_localgroup.py
usr/share/empire/lib/modules/powershell/situational_awareness/network/powerview/get_forest_domain.py
usr/share/empire/lib/modules/powershell/situational_awareness/network/powerview/find_gpo_location.py
usr/share/empire/lib/modules/powershell/situational_awareness/network/powerview/process_hunter.py
usr/share/empire/lib/modules/powershell/situational_awareness/network/powerview/get_ou.py
usr/share/empire/lib/modules/powershell/situational_awareness/network/powerview/user_hunter.py
usr/share/empire/lib/modules/powershell/situational_awareness/network/powerview/get_subnet.py
usr/share/empire/lib/modules/powershell/situational_awareness/network/powerview/get_fileserver.py
usr/share/empire/lib/modules/powershell/situational_awareness/network/powerview/get_domain_controller.py
usr/share/empire/lib/modules/powershell/situational_awareness/network/powerview/get_computer.py
usr/share/empire/lib/modules/powershell/situational_awareness/network/powerview/get_domain_policy.py
usr/share/empire/lib/modules/powershell/situational_awareness/network/powerview/get_group.py
usr/share/empire/lib/modules/powershell/situational_awareness/network/powerview/get_rdp_session.py
usr/share/empire/lib/modules/powershell/situational_awareness/network/powerview/get_group_member.py
usr/share/empire/lib/modules/powershell/situational_awareness/network/powerview/get_cached_rdpconnection.py
usr/share/empire/lib/modules/powershell/situational_awareness/network/powerview/set_ad_object.py
usr/share/empire/lib/modules/powershell/situational_awareness/network/powerview/map_domain_trust.py
usr/share/empire/lib/modules/powershell/privesc/bypassuac.py
usr/share/empire/lib/modules/powershell/privesc/bypassuac_eventvwr.py
usr/share/empire/lib/modules/powershell/privesc/getsystem.py
usr/share/empire/lib/modules/powershell/privesc/ms16-032.py
usr/share/empire/lib/modules/powershell/privesc/bypassuac_wscript.py
usr/share/empire/lib/modules/powershell/privesc/gpp.py
usr/share/empire/lib/modules/powershell/privesc/bypassuac_fodhelper.py
usr/share/empire/lib/modules/powershell/privesc/powerup/
usr/share/empire/lib/modules/powershell/privesc/ask.py
usr/share/empire/lib/modules/powershell/privesc/bypassuac_sdctlbypass.py
usr/share/empire/lib/modules/powershell/privesc/bypassuac_env.py
usr/share/empire/lib/modules/powershell/privesc/bypassuac_tokenmanipulation.py
usr/share/empire/lib/modules/powershell/privesc/mcafee_sitelist.py
usr/share/empire/lib/modules/powershell/privesc/ms16-135.py
usr/share/empire/lib/modules/powershell/privesc/tater.py
usr/share/empire/lib/modules/powershell/privesc/powerup/service_exe_stager.py
usr/share/empire/lib/modules/powershell/privesc/powerup/write_dllhijacker.py
usr/share/empire/lib/modules/powershell/privesc/powerup/allchecks.py
usr/share/empire/lib/modules/powershell/privesc/powerup/service_stager.py
usr/share/empire/lib/modules/powershell/privesc/powerup/service_exe_restore.py
usr/share/empire/lib/modules/powershell/privesc/powerup/service_exe_useradd.py
usr/share/empire/lib/modules/powershell/privesc/powerup/find_dllhijack.py
usr/share/empire/lib/modules/powershell/privesc/powerup/service_useradd.py
usr/share/empire/lib/modules/powershell/management/runas.py
usr/share/empire/lib/modules/powershell/management/sid_to_user.py
usr/share/empire/lib/modules/powershell/management/mailraider/
usr/share/empire/lib/modules/powershell/management/vnc.py
usr/share/empire/lib/modules/powershell/management/switch_listener.py
usr/share/empire/lib/modules/powershell/management/downgrade_account.py
usr/share/empire/lib/modules/powershell/management/psinject.py
usr/share/empire/lib/modules/powershell/management/wdigest_downgrade.py
usr/share/empire/lib/modules/powershell/management/enable_rdp.py
usr/share/empire/lib/modules/powershell/management/spawn.py
usr/share/empire/lib/modules/powershell/management/timestomp.py
usr/share/empire/lib/modules/powershell/management/restart.py
usr/share/empire/lib/modules/powershell/management/disable_rdp.py
usr/share/empire/lib/modules/powershell/management/spawnas.py
usr/share/empire/lib/modules/powershell/management/enable_multi_rdp.py
usr/share/empire/lib/modules/powershell/management/lock.py
usr/share/empire/lib/modules/powershell/management/logoff.py
usr/share/empire/lib/modules/powershell/management/zipfolder.py
usr/share/empire/lib/modules/powershell/management/user_to_sid.py
usr/share/empire/lib/modules/powershell/management/invoke_script.py
usr/share/empire/lib/modules/powershell/management/get_domain_sid.py
usr/share/empire/lib/modules/powershell/management/reflective_inject.py
usr/share/empire/lib/modules/powershell/management/honeyhash.py
usr/share/empire/lib/modules/powershell/management/mailraider/search_gal.py
usr/share/empire/lib/modules/powershell/management/mailraider/mail_search.py
usr/share/empire/lib/modules/powershell/management/mailraider/get_emailitems.py
usr/share/empire/lib/modules/powershell/management/mailraider/view_email.py
usr/share/empire/lib/modules/powershell/management/mailraider/send_mail.py
usr/share/empire/lib/modules/powershell/management/mailraider/disable_security.py
usr/share/empire/lib/modules/powershell/management/mailraider/get_subfolders.py
usr/share/empire/lib/modules/powershell/lateral_movement/invoke_sqloscmd.py
usr/share/empire/lib/modules/powershell/lateral_movement/invoke_wmi.py
usr/share/empire/lib/modules/powershell/lateral_movement/invoke_dcom.py
usr/share/empire/lib/modules/powershell/lateral_movement/jenkins_script_console.py
usr/share/empire/lib/modules/powershell/lateral_movement/new_gpo_immediate_task.py
usr/share/empire/lib/modules/powershell/lateral_movement/invoke_psexec.py
usr/share/empire/lib/modules/powershell/lateral_movement/invoke_smbexec.py
usr/share/empire/lib/modules/powershell/lateral_movement/invoke_sshcommand.py
usr/share/empire/lib/modules/powershell/lateral_movement/invoke_executemsbuild.py
usr/share/empire/lib/modules/powershell/lateral_movement/inveigh_relay.py
usr/share/empire/lib/modules/powershell/lateral_movement/invoke_psremoting.py
usr/share/empire/lib/modules/powershell/lateral_movement/invoke_wmi_debugger.py
usr/share/empire/lib/modules/powershell/persistence/userland/
usr/share/empire/lib/modules/powershell/persistence/misc/
usr/share/empire/lib/modules/powershell/persistence/elevated/
usr/share/empire/lib/modules/powershell/persistence/powerbreach/
usr/share/empire/lib/modules/powershell/persistence/powerbreach/eventlog.py
usr/share/empire/lib/modules/powershell/persistence/powerbreach/deaduser.py
usr/share/empire/lib/modules/powershell/persistence/powerbreach/resolver.py
usr/share/empire/lib/modules/powershell/persistence/elevated/wmi.py
usr/share/empire/lib/modules/powershell/persistence/elevated/schtasks.py
usr/share/empire/lib/modules/powershell/persistence/elevated/registry.py
usr/share/empire/lib/modules/powershell/persistence/elevated/wmi_updater.py
usr/share/empire/lib/modules/powershell/persistence/misc/memssp.py
usr/share/empire/lib/modules/powershell/persistence/misc/add_sid_history.py
usr/share/empire/lib/modules/powershell/persistence/misc/install_ssp.py
usr/share/empire/lib/modules/powershell/persistence/misc/disable_machine_acct_change.py
usr/share/empire/lib/modules/powershell/persistence/misc/debugger.py
usr/share/empire/lib/modules/powershell/persistence/misc/add_netuser.py
usr/share/empire/lib/modules/powershell/persistence/misc/get_ssps.py
usr/share/empire/lib/modules/powershell/persistence/misc/skeleton_key.py
usr/share/empire/lib/modules/powershell/persistence/userland/schtasks.py
usr/share/empire/lib/modules/powershell/persistence/userland/backdoor_lnk.py
usr/share/empire/lib/modules/powershell/persistence/userland/registry.py
usr/share/empire/lib/modules/powershell/recon/http_login.py
usr/share/empire/lib/modules/powershell/recon/find_fruit.py
usr/share/empire/lib/modules/powershell/recon/get_sql_server_login_default_pw.py
usr/share/empire/lib/modules/python/persistence/
usr/share/empire/lib/modules/python/lateral_movement/
usr/share/empire/lib/modules/python/management/
usr/share/empire/lib/modules/python/exploit/
usr/share/empire/lib/modules/python/privesc/
usr/share/empire/lib/modules/python/situational_awareness/
usr/share/empire/lib/modules/python/trollsploit/
usr/share/empire/lib/modules/python/collection/
usr/share/empire/lib/modules/python/collection/linux/
usr/share/empire/lib/modules/python/collection/osx/
usr/share/empire/lib/modules/python/collection/osx/keychaindump.py
usr/share/empire/lib/modules/python/collection/osx/hashdump.py
usr/share/empire/lib/modules/python/collection/osx/native_screenshot_mss.py
usr/share/empire/lib/modules/python/collection/osx/prompt.py
usr/share/empire/lib/modules/python/collection/osx/browser_dump.py
usr/share/empire/lib/modules/python/collection/osx/keylogger.py
usr/share/empire/lib/modules/python/collection/osx/search_email.py
usr/share/empire/lib/modules/python/collection/osx/kerberosdump.py
usr/share/empire/lib/modules/python/collection/osx/pillage_user.py
usr/share/empire/lib/modules/python/collection/osx/native_screenshot.py
usr/share/empire/lib/modules/python/collection/osx/sniffer.py
usr/share/empire/lib/modules/python/collection/osx/imessage_dump.py
usr/share/empire/lib/modules/python/collection/osx/keychaindump_chainbreaker.py
usr/share/empire/lib/modules/python/collection/osx/screensaver_alleyoop.py
usr/share/empire/lib/modules/python/collection/osx/webcam.py
usr/share/empire/lib/modules/python/collection/osx/screenshot.py
usr/share/empire/lib/modules/python/collection/osx/clipboard.py
usr/share/empire/lib/modules/python/collection/linux/hashdump.py
usr/share/empire/lib/modules/python/collection/linux/keylogger.py
usr/share/empire/lib/modules/python/collection/linux/pillage_user.py
usr/share/empire/lib/modules/python/collection/linux/xkeylogger.py
usr/share/empire/lib/modules/python/collection/linux/sniffer.py
usr/share/empire/lib/modules/python/collection/linux/mimipenguin.py
usr/share/empire/lib/modules/python/trollsploit/osx/
usr/share/empire/lib/modules/python/trollsploit/osx/thunderstruck.py
usr/share/empire/lib/modules/python/trollsploit/osx/change_background.py
usr/share/empire/lib/modules/python/trollsploit/osx/login_message.py
usr/share/empire/lib/modules/python/trollsploit/osx/say.py
usr/share/empire/lib/modules/python/situational_awareness/network/
usr/share/empire/lib/modules/python/situational_awareness/host/
usr/share/empire/lib/modules/python/situational_awareness/host/multi/
usr/share/empire/lib/modules/python/situational_awareness/host/osx/
usr/share/empire/lib/modules/python/situational_awareness/host/osx/HijackScanner.py
usr/share/empire/lib/modules/python/situational_awareness/host/osx/situational_awareness.py
usr/share/empire/lib/modules/python/situational_awareness/host/multi/SuidGuidSearch.py
usr/share/empire/lib/modules/python/situational_awareness/host/multi/WorldWriteableFileSearch.py
usr/share/empire/lib/modules/python/situational_awareness/network/smb_mount.py
usr/share/empire/lib/modules/python/situational_awareness/network/active_directory/
usr/share/empire/lib/modules/python/situational_awareness/network/gethostbyname.py
usr/share/empire/lib/modules/python/situational_awareness/network/port_scan.py
usr/share/empire/lib/modules/python/situational_awareness/network/http_rest_api.py
usr/share/empire/lib/modules/python/situational_awareness/network/find_fruit.py
usr/share/empire/lib/modules/python/situational_awareness/network/dcos/
usr/share/empire/lib/modules/python/situational_awareness/network/dcos/etcd_crawler.py
usr/share/empire/lib/modules/python/situational_awareness/network/dcos/chronos_api_add_job.py
usr/share/empire/lib/modules/python/situational_awareness/network/dcos/marathon_api_create_start_app.py
usr/share/empire/lib/modules/python/situational_awareness/network/dcos/marathon_api_delete_app.py
usr/share/empire/lib/modules/python/situational_awareness/network/dcos/chronos_api_delete_job.py
usr/share/empire/lib/modules/python/situational_awareness/network/dcos/chronos_api_start_job.py
usr/share/empire/lib/modules/python/situational_awareness/network/active_directory/get_groupmembers.py
usr/share/empire/lib/modules/python/situational_awareness/network/active_directory/get_groupmemberships.py
usr/share/empire/lib/modules/python/situational_awareness/network/active_directory/get_fileservers.py
usr/share/empire/lib/modules/python/situational_awareness/network/active_directory/get_computers.py
usr/share/empire/lib/modules/python/situational_awareness/network/active_directory/dscl_get_groups.py
usr/share/empire/lib/modules/python/situational_awareness/network/active_directory/get_domaincontrollers.py
usr/share/empire/lib/modules/python/situational_awareness/network/active_directory/get_ous.py
usr/share/empire/lib/modules/python/situational_awareness/network/active_directory/get_userinformation.py
usr/share/empire/lib/modules/python/situational_awareness/network/active_directory/dscl_get_groupmembers.py
usr/share/empire/lib/modules/python/situational_awareness/network/active_directory/get_users.py
usr/share/empire/lib/modules/python/situational_awareness/network/active_directory/get_groups.py
usr/share/empire/lib/modules/python/situational_awareness/network/active_directory/dscl_get_users.py
usr/share/empire/lib/modules/python/privesc/multi/
usr/share/empire/lib/modules/python/privesc/windows/
usr/share/empire/lib/modules/python/privesc/linux/
usr/share/empire/lib/modules/python/privesc/osx/
usr/share/empire/lib/modules/python/privesc/osx/piggyback.py
usr/share/empire/lib/modules/python/privesc/osx/dyld_print_to_file.py
usr/share/empire/lib/modules/python/privesc/linux/linux_priv_checker.py
usr/share/empire/lib/modules/python/privesc/linux/unix_privesc_check.py
usr/share/empire/lib/modules/python/privesc/windows/get_gpppasswords.py
usr/share/empire/lib/modules/python/privesc/multi/sudo_spawn.py
usr/share/empire/lib/modules/python/privesc/multi/bashdoor.py
usr/share/empire/lib/modules/python/exploit/web/
usr/share/empire/lib/modules/python/exploit/web/jboss_jmx.py
usr/share/empire/lib/modules/python/management/multi/
usr/share/empire/lib/modules/python/management/osx/
usr/share/empire/lib/modules/python/management/osx/screen_sharing.py
usr/share/empire/lib/modules/python/management/osx/shellcodeinject64.py
usr/share/empire/lib/modules/python/management/osx/ls_m.py
usr/share/empire/lib/modules/python/management/osx/shellb.py
usr/share/empire/lib/modules/python/management/multi/socks.py
usr/share/empire/lib/modules/python/management/multi/kerberos_inject.py
usr/share/empire/lib/modules/python/management/multi/spawn.py
usr/share/empire/lib/modules/python/lateral_movement/multi/
usr/share/empire/lib/modules/python/lateral_movement/multi/ssh_command.py
usr/share/empire/lib/modules/python/lateral_movement/multi/ssh_launcher.py
usr/share/empire/lib/modules/python/persistence/multi/
usr/share/empire/lib/modules/python/persistence/osx/
usr/share/empire/lib/modules/python/persistence/osx/RemoveDaemon.py
usr/share/empire/lib/modules/python/persistence/osx/CreateHijacker.py
usr/share/empire/lib/modules/python/persistence/osx/launchdaemonexecutable.py
usr/share/empire/lib/modules/python/persistence/osx/loginhook.py
usr/share/empire/lib/modules/python/persistence/osx/mail.py
usr/share/empire/lib/modules/python/persistence/multi/crontab.py
usr/share/empire/lib/listeners/http_com.py
usr/share/empire/lib/listeners/template.py
usr/share/empire/lib/listeners/http.py
usr/share/empire/lib/listeners/http_foreign.py
usr/share/empire/lib/listeners/http_mapi.py
usr/share/empire/lib/listeners/redirector.py
usr/share/empire/lib/listeners/meterpreter.py
usr/share/empire/lib/listeners/http_hop.py
usr/share/empire/lib/listeners/dbx.py
usr/share/empire/lib/common/plugins.py
usr/share/empire/lib/common/http.py
usr/share/empire/lib/common/messages.py
usr/share/empire/lib/common/packets.py
usr/share/empire/lib/common/encryption.py
usr/share/empire/lib/common/helpers.py
usr/share/empire/lib/common/credentials.py
usr/share/empire/lib/common/stagers.py
usr/share/empire/lib/common/pylnk.py
usr/share/empire/lib/common/modules.py
usr/share/empire/lib/common/obfuscation.py
usr/share/empire/lib/common/listeners.py
usr/share/empire/lib/common/__init__.py
usr/share/empire/lib/common/templating.py
usr/share/empire/lib/common/empire.py
usr/share/empire/lib/common/agents.py
usr/share/empire/lib/stagers/multi/
usr/share/empire/lib/stagers/windows/
usr/share/empire/lib/stagers/osx/
usr/share/empire/lib/stagers/osx/applescript.py
usr/share/empire/lib/stagers/osx/macho.py
usr/share/empire/lib/stagers/osx/teensy.py
usr/share/empire/lib/stagers/osx/jar.py
usr/share/empire/lib/stagers/osx/safari_launcher.py
usr/share/empire/lib/stagers/osx/application.py
usr/share/empire/lib/stagers/osx/macro.py
usr/share/empire/lib/stagers/osx/pkg.py
usr/share/empire/lib/stagers/osx/launcher.py
usr/share/empire/lib/stagers/osx/dylib.py
usr/share/empire/lib/stagers/osx/ducky.py
usr/share/empire/lib/stagers/windows/launcher_vbs.py
usr/share/empire/lib/stagers/windows/launcher_sct.py
usr/share/empire/lib/stagers/windows/dll.py
usr/share/empire/lib/stagers/windows/teensy.py
usr/share/empire/lib/stagers/windows/launcher_bat.py
usr/share/empire/lib/stagers/windows/hta.py
usr/share/empire/lib/stagers/windows/macro.py
usr/share/empire/lib/stagers/windows/launcher_lnk.py
usr/share/empire/lib/stagers/windows/launcher_xml.py
usr/share/empire/lib/stagers/windows/bunny.py
usr/share/empire/lib/stagers/windows/macroless_msword.py
usr/share/empire/lib/stagers/windows/ducky.py
usr/share/empire/lib/stagers/multi/bash.py
usr/share/empire/lib/stagers/multi/pyinstaller.py
usr/share/empire/lib/stagers/multi/macro.py
usr/share/empire/lib/stagers/multi/war.py
usr/share/empire/lib/stagers/multi/launcher.py
usr/share/empire/lib/powershell/Invoke-Obfuscation/
usr/share/empire/lib/powershell/Invoke-Obfuscation/LICENSE
usr/share/empire/lib/powershell/Invoke-Obfuscation/Invoke-Obfuscation.psm1
usr/share/empire/lib/powershell/Invoke-Obfuscation/Out-ObfuscatedStringCommand.ps1
usr/share/empire/lib/powershell/Invoke-Obfuscation/Out-EncodedSpecialCharOnlyCommand.ps1
usr/share/empire/lib/powershell/Invoke-Obfuscation/README.md
usr/share/empire/lib/powershell/Invoke-Obfuscation/Out-EncodedHexCommand.ps1
usr/share/empire/lib/powershell/Invoke-Obfuscation/Out-PowerShellLauncher.ps1
usr/share/empire/lib/powershell/Invoke-Obfuscation/Out-SecureStringCommand.ps1
usr/share/empire/lib/powershell/Invoke-Obfuscation/Out-EncodedWhitespaceCommand.ps1
usr/share/empire/lib/powershell/Invoke-Obfuscation/Invoke-Obfuscation.ps1
usr/share/empire/lib/powershell/Invoke-Obfuscation/Out-EncodedBinaryCommand.ps1
usr/share/empire/lib/powershell/Invoke-Obfuscation/Out-ObfuscatedTokenCommand.ps1
usr/share/empire/lib/powershell/Invoke-Obfuscation/Out-EncodedBXORCommand.ps1
usr/share/empire/lib/powershell/Invoke-Obfuscation/Out-EncodedOctalCommand.ps1
usr/share/empire/lib/powershell/Invoke-Obfuscation/Invoke-Obfuscation.psd1
usr/share/empire/lib/powershell/Invoke-Obfuscation/Out-EncodedAsciiCommand.ps1
usr/share/empire/data/module_source/
usr/share/empire/data/agent/
usr/share/empire/data/profiles/
usr/share/empire/data/obfuscated_module_source/
usr/share/empire/data/misc/
usr/share/empire/data/misc/welcome.png
usr/share/empire/data/misc/pkgbuild/
usr/share/empire/data/misc/ReflectivePick_x86_orig.dll
usr/share/empire/data/misc/python_modules/
usr/share/empire/data/misc/templateLauncher.dylib
usr/share/empire/data/misc/templateSource/
usr/share/empire/data/misc/xar-1.5.2.tar.gz
usr/share/empire/data/misc/machotemplate
usr/share/empire/data/misc/hop.php
usr/share/empire/data/misc/ReflectivePick_x64_orig.dll
usr/share/empire/data/misc/inactive_modules/
usr/share/empire/data/misc/apptemplateResources/
usr/share/empire/data/misc/hijackers/
usr/share/empire/data/misc/templateLauncher64.dylib
usr/share/empire/data/misc/Run.java
usr/share/empire/data/misc/hijackers/template.dylib
usr/share/empire/data/misc/hijackers/template64.dylib
usr/share/empire/data/misc/apptemplateResources/x86/
usr/share/empire/data/misc/apptemplateResources/empty/
usr/share/empire/data/misc/apptemplateResources/icon/
usr/share/empire/data/misc/apptemplateResources/x64/
usr/share/empire/data/misc/apptemplateResources/x64/launcher.app/
usr/share/empire/data/misc/apptemplateResources/x64/launcher.app/Contents/
usr/share/empire/data/misc/apptemplateResources/x64/launcher.app/Contents/MacOS/
usr/share/empire/data/misc/apptemplateResources/x64/launcher.app/Contents/PkgInfo
usr/share/empire/data/misc/apptemplateResources/x64/launcher.app/Contents/Resources/
usr/share/empire/data/misc/apptemplateResources/x64/launcher.app/Contents/Info.plist
usr/share/empire/data/misc/apptemplateResources/x64/launcher.app/Contents/_CodeSignature/
usr/share/empire/data/misc/apptemplateResources/x64/launcher.app/Contents/_CodeSignature/CodeResources
usr/share/empire/data/misc/apptemplateResources/x64/launcher.app/Contents/Resources/Base.lproj/
usr/share/empire/data/misc/apptemplateResources/x64/launcher.app/Contents/Resources/Base.lproj/MainMenu.nib
usr/share/empire/data/misc/apptemplateResources/x64/launcher.app/Contents/MacOS/launcher
usr/share/empire/data/misc/apptemplateResources/icon/stormtrooper.icns
usr/share/empire/data/misc/apptemplateResources/empty/macho
usr/share/empire/data/misc/apptemplateResources/x86/launcher.app/
usr/share/empire/data/misc/apptemplateResources/x86/launcher.app/Contents/
usr/share/empire/data/misc/apptemplateResources/x86/launcher.app/Contents/MacOS/
usr/share/empire/data/misc/apptemplateResources/x86/launcher.app/Contents/PkgInfo
usr/share/empire/data/misc/apptemplateResources/x86/launcher.app/Contents/Resources/
usr/share/empire/data/misc/apptemplateResources/x86/launcher.app/Contents/Info.plist
usr/share/empire/data/misc/apptemplateResources/x86/launcher.app/Contents/_CodeSignature/
usr/share/empire/data/misc/apptemplateResources/x86/launcher.app/Contents/_CodeSignature/CodeResources
usr/share/empire/data/misc/apptemplateResources/x86/launcher.app/Contents/Resources/Base.lproj/
usr/share/empire/data/misc/apptemplateResources/x86/launcher.app/Contents/Resources/Base.lproj/MainMenu.nib
usr/share/empire/data/misc/apptemplateResources/x86/launcher.app/Contents/MacOS/launcher
usr/share/empire/data/misc/inactive_modules/redirector.py
usr/share/empire/data/misc/templateSource/Dylib.c
usr/share/empire/data/misc/templateSource/macho.m
usr/share/empire/data/misc/python_modules/mss.zip
usr/share/empire/data/misc/python_modules/keyboard.zip
usr/share/empire/data/misc/pkgbuild/scripts/
usr/share/empire/data/misc/pkgbuild/expand/
usr/share/empire/data/misc/pkgbuild/root/
usr/share/empire/data/misc/pkgbuild/root/Applications/
usr/share/empire/data/misc/pkgbuild/root/Applications/test
usr/share/empire/data/misc/pkgbuild/expand/PackageInfo
usr/share/empire/data/misc/pkgbuild/scripts/postinstall
usr/share/empire/data/obfuscated_module_source/recon/
usr/share/empire/data/obfuscated_module_source/persistence/
usr/share/empire/data/obfuscated_module_source/lateral_movement/
usr/share/empire/data/obfuscated_module_source/exfil/
usr/share/empire/data/obfuscated_module_source/management/
usr/share/empire/data/obfuscated_module_source/privesc/
usr/share/empire/data/obfuscated_module_source/situational_awareness/
usr/share/empire/data/obfuscated_module_source/trollsploit/
usr/share/empire/data/obfuscated_module_source/fun/
usr/share/empire/data/obfuscated_module_source/collection/
usr/share/empire/data/obfuscated_module_source/credentials/
usr/share/empire/data/obfuscated_module_source/code_execution/
usr/share/empire/data/obfuscated_module_source/exploitation/
usr/share/empire/data/obfuscated_module_source/exploitation/.gitignore
usr/share/empire/data/obfuscated_module_source/code_execution/.gitignore
usr/share/empire/data/obfuscated_module_source/credentials/.gitignore
usr/share/empire/data/obfuscated_module_source/collection/.gitignore
usr/share/empire/data/obfuscated_module_source/collection/vaults/
usr/share/empire/data/obfuscated_module_source/collection/vaults/.gitignore
usr/share/empire/data/obfuscated_module_source/fun/.gitignore
usr/share/empire/data/obfuscated_module_source/trollsploit/.gitignore
usr/share/empire/data/obfuscated_module_source/situational_awareness/network/
usr/share/empire/data/obfuscated_module_source/situational_awareness/host/
usr/share/empire/data/obfuscated_module_source/situational_awareness/.gitignore
usr/share/empire/data/obfuscated_module_source/situational_awareness/host/.gitignore
usr/share/empire/data/obfuscated_module_source/situational_awareness/network/.gitignore
usr/share/empire/data/obfuscated_module_source/privesc/.gitignore
usr/share/empire/data/obfuscated_module_source/management/.gitignore
usr/share/empire/data/obfuscated_module_source/exfil/.gitignore
usr/share/empire/data/obfuscated_module_source/lateral_movement/.gitignore
usr/share/empire/data/obfuscated_module_source/persistence/.gitignore
usr/share/empire/data/obfuscated_module_source/recon/.gitignore
usr/share/empire/data/profiles/comfoo.txt
usr/share/empire/data/profiles/pitty_tiger.txt
usr/share/empire/data/profiles/fiesta.txt
usr/share/empire/data/profiles/zeus.txt
usr/share/empire/data/agent/agent.py
usr/share/empire/data/agent/stagers/
usr/share/empire/data/agent/agent.ps1
usr/share/empire/data/agent/stagers/http.ps1
usr/share/empire/data/agent/stagers/dropbox.ps1
usr/share/empire/data/agent/stagers/http.py
usr/share/empire/data/agent/stagers/http_com.ps1
usr/share/empire/data/agent/stagers/http_mapi.ps1
usr/share/empire/data/agent/stagers/dropbox.py
usr/share/empire/data/agent/stagers/common/
usr/share/empire/data/agent/stagers/common/diffiehellman.py
usr/share/empire/data/agent/stagers/common/get_sysinfo.py
usr/share/empire/data/agent/stagers/common/aes.py
usr/share/empire/data/agent/stagers/common/rc4.py
usr/share/empire/data/module_source/python/
usr/share/empire/data/module_source/recon/
usr/share/empire/data/module_source/persistence/
usr/share/empire/data/module_source/lateral_movement/
usr/share/empire/data/module_source/exfil/
usr/share/empire/data/module_source/management/
usr/share/empire/data/module_source/privesc/
usr/share/empire/data/module_source/situational_awareness/
usr/share/empire/data/module_source/trollsploit/
usr/share/empire/data/module_source/fun/
usr/share/empire/data/module_source/collection/
usr/share/empire/data/module_source/credentials/
usr/share/empire/data/module_source/code_execution/
usr/share/empire/data/module_source/exploitation/
usr/share/empire/data/module_source/exploitation/Exploit-JBoss.ps1
usr/share/empire/data/module_source/exploitation/Exploit-EternalBlue.ps1
usr/share/empire/data/module_source/exploitation/Exploit-Jenkins.ps1
usr/share/empire/data/module_source/code_execution/ntsdexts_x86.dll
usr/share/empire/data/module_source/code_execution/Invoke-MetasploitPayload.ps1
usr/share/empire/data/module_source/code_execution/ntsd_x64.exe
usr/share/empire/data/module_source/code_execution/ntsdexts_x64.dll
usr/share/empire/data/module_source/code_execution/Invoke-DllInjection.ps1
usr/share/empire/data/module_source/code_execution/Invoke-Ntsd.ps1
usr/share/empire/data/module_source/code_execution/Invoke-ReflectivePEInjection.ps1
usr/share/empire/data/module_source/code_execution/Invoke-Shellcode.ps1
usr/share/empire/data/module_source/code_execution/ntsd_x86.exe
usr/share/empire/data/module_source/code_execution/Invoke-ShellcodeMSIL.ps1
usr/share/empire/data/module_source/credentials/Invoke-TokenManipulation.ps1
usr/share/empire/data/module_source/credentials/Invoke-SessionGopher.ps1
usr/share/empire/data/module_source/credentials/Invoke-Mimikatz.ps1
usr/share/empire/data/module_source/credentials/Get-VaultCredential.ps1
usr/share/empire/data/module_source/credentials/Invoke-PowerDump.ps1
usr/share/empire/data/module_source/credentials/Invoke-CredentialInjection.ps1
usr/share/empire/data/module_source/credentials/dumpCredStore.ps1
usr/share/empire/data/module_source/credentials/Invoke-DCSync.ps1
usr/share/empire/data/module_source/credentials/Invoke-Kerberoast.ps1
usr/share/empire/data/module_source/collection/Invoke-NetRipper.ps1
usr/share/empire/data/module_source/collection/Get-FoxDump.ps1
usr/share/empire/data/module_source/collection/Get-USBKeystrokes.ps1
usr/share/empire/data/module_source/collection/Get-IndexedItem.ps1
usr/share/empire/data/module_source/collection/Get-BrowserData.ps1
usr/share/empire/data/module_source/collection/Get-Screenshot.ps1
usr/share/empire/data/module_source/collection/Get-ClipboardContents.ps1
usr/share/empire/data/module_source/collection/vaults/
usr/share/empire/data/module_source/collection/Out-Minidump.ps1
usr/share/empire/data/module_source/collection/Get-ChromeDump.ps1
usr/share/empire/data/module_source/collection/Get-SQLColumnSampleData.ps1
usr/share/empire/data/module_source/collection/Get-Keystrokes.ps1
usr/share/empire/data/module_source/collection/Get-SQLQuery.ps1
usr/share/empire/data/module_source/collection/Invoke-NinjaCopy.ps1
usr/share/empire/data/module_source/collection/Invoke-Inveigh.ps1
usr/share/empire/data/module_source/collection/vaults/KeeThief.ps1
usr/share/empire/data/module_source/collection/vaults/KeePassConfig.ps1
usr/share/empire/data/module_source/fun/Set-Wallpaper.ps1
usr/share/empire/data/module_source/fun/Invoke-VoiceTroll.ps1
usr/share/empire/data/module_source/fun/Invoke-Thunderstruck.ps1
usr/share/empire/data/module_source/trollsploit/Get-RickAstley.ps1
usr/share/empire/data/module_source/situational_awareness/network/
usr/share/empire/data/module_source/situational_awareness/host/
usr/share/empire/data/module_source/situational_awareness/host/Invoke-Paranoia.ps1
usr/share/empire/data/module_source/situational_awareness/host/Invoke-WinEnum.ps1
usr/share/empire/data/module_source/situational_awareness/host/Get-SystemDNSServer.ps1
usr/share/empire/data/module_source/situational_awareness/host/Find-TrustedDocuments.ps1
usr/share/empire/data/module_source/situational_awareness/host/Get-ComputerDetails.ps1
usr/share/empire/data/module_source/situational_awareness/host/Start-MonitorTCPConnections.ps1
usr/share/empire/data/module_source/situational_awareness/network/Invoke-SmbScanner.ps1
usr/share/empire/data/module_source/situational_awareness/network/powerview.ps1
usr/share/empire/data/module_source/situational_awareness/network/Get-SQLInstanceDomain.ps1
usr/share/empire/data/module_source/situational_awareness/network/Invoke-ReverseDNSLookup.ps1
usr/share/empire/data/module_source/situational_awareness/network/Invoke-Portscan.ps1
usr/share/empire/data/module_source/situational_awareness/network/Get-SQLServerInfo.ps1
usr/share/empire/data/module_source/situational_awareness/network/BloodHound.ps1
usr/share/empire/data/module_source/situational_awareness/network/Invoke-SMBAutoBrute.ps1
usr/share/empire/data/module_source/situational_awareness/network/Get-SPN.ps1
usr/share/empire/data/module_source/situational_awareness/network/Invoke-ARPScan.ps1
usr/share/empire/data/module_source/privesc/Invoke-WScriptBypassUAC.ps1
usr/share/empire/data/module_source/privesc/Invoke-EventVwrBypass.ps1
usr/share/empire/data/module_source/privesc/Invoke-Tater.ps1
usr/share/empire/data/module_source/privesc/Invoke-EnvBypass.ps1
usr/share/empire/data/module_source/privesc/Get-GPPPassword.ps1
usr/share/empire/data/module_source/privesc/Invoke-BypassUAC.ps1
usr/share/empire/data/module_source/privesc/Invoke-SDCLTBypass.ps1
usr/share/empire/data/module_source/privesc/Invoke-MS16135.ps1
usr/share/empire/data/module_source/privesc/Invoke-FodHelperBypass.ps1
usr/share/empire/data/module_source/privesc/Get-System.ps1
usr/share/empire/data/module_source/privesc/PowerUp.ps1
usr/share/empire/data/module_source/privesc/Get-SiteListPassword.ps1
usr/share/empire/data/module_source/privesc/Invoke-MS16032.ps1
usr/share/empire/data/module_source/privesc/Invoke-BypassUACTokenManipulation.ps1
usr/share/empire/data/module_source/management/Invoke-Vnc.ps1
usr/share/empire/data/module_source/management/Set-MacAttribute.ps1
usr/share/empire/data/module_source/management/Invoke-RunAs.ps1
usr/share/empire/data/module_source/management/New-HoneyHash.ps1
usr/share/empire/data/module_source/management/MailRaider.ps1
usr/share/empire/data/module_source/management/Invoke-ReflectivePEInjection.ps1
usr/share/empire/data/module_source/management/Invoke-PSInject.ps1
usr/share/empire/data/module_source/exfil/Invoke-PostExfil.ps1
usr/share/empire/data/module_source/exfil/Invoke-EgressCheck.ps1
usr/share/empire/data/module_source/exfil/Invoke-ExfilDataToGitHub.ps1
usr/share/empire/data/module_source/lateral_movement/Invoke-InveighRelay.ps1
usr/share/empire/data/module_source/lateral_movement/Invoke-PsExec.ps1
usr/share/empire/data/module_source/lateral_movement/Invoke-SQLOSCmd.ps1
usr/share/empire/data/module_source/lateral_movement/Invoke-ExecuteMSBuild.ps1
usr/share/empire/data/module_source/lateral_movement/Invoke-DCOM.ps1
usr/share/empire/data/module_source/lateral_movement/Invoke-SSHCommand.ps1
usr/share/empire/data/module_source/lateral_movement/Invoke-SMBExec.ps1
usr/share/empire/data/module_source/persistence/Persistence.psm1
usr/share/empire/data/module_source/persistence/Invoke-BackdoorLNK.ps1
usr/share/empire/data/module_source/persistence/Get-SecurityPackages.ps1
usr/share/empire/data/module_source/persistence/Install-SSP.ps1
usr/share/empire/data/module_source/persistence/PowerBreach.ps1
usr/share/empire/data/module_source/recon/HTTP-Login.ps1
usr/share/empire/data/module_source/recon/Get-SQLServerLoginDefaultPw.ps1
usr/share/empire/data/module_source/recon/Find-Fruit.ps1
usr/share/empire/data/module_source/python/lateral_movement/
usr/share/empire/data/module_source/python/lateral_movement/socks_source.py
usr/share/empire/setup/reset.sh
usr/share/empire/setup/requirements.txt
usr/share/empire/setup/cert.sh
usr/share/empire/setup/setup_database.py
usr/share/empire/plugins/example.py
usr/share/empire/plugins/__init__.py
usr/share/licenses/empire/
usr/share/licenses/empire/LICENSE
