Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Latest Apollo Updates #4

Open
wants to merge 214 commits into
base: master
Choose a base branch
from
Open

Commits on Dec 27, 2023

  1. Configuration menu
    Copy the full SHA
    9d275f9 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    a29beb9 View commit details
    Browse the repository at this point in the history

Commits on Jan 15, 2024

  1. init coffloader

    Retrospected committed Jan 15, 2024
    Configuration menu
    Copy the full SHA
    91207ca View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    8e9ad93 View commit details
    Browse the repository at this point in the history
  3. Configuration menu
    Copy the full SHA
    0c5916d View commit details
    Browse the repository at this point in the history
  4. Configuration menu
    Copy the full SHA
    dd1aaa7 View commit details
    Browse the repository at this point in the history
  5. update proj differences

    Retrospected committed Jan 15, 2024
    Configuration menu
    Copy the full SHA
    4c66b80 View commit details
    Browse the repository at this point in the history
  6. adding code path

    Retrospected committed Jan 15, 2024
    Configuration menu
    Copy the full SHA
    91a766a View commit details
    Browse the repository at this point in the history
  7. Configuration menu
    Copy the full SHA
    8bfd64a View commit details
    Browse the repository at this point in the history
  8. Configuration menu
    Copy the full SHA
    9fb5507 View commit details
    Browse the repository at this point in the history
  9. adding fodyweavers

    Retrospected committed Jan 15, 2024
    Configuration menu
    Copy the full SHA
    8bcdd2d View commit details
    Browse the repository at this point in the history
  10. working compile configs

    Retrospected committed Jan 15, 2024
    Configuration menu
    Copy the full SHA
    919243a View commit details
    Browse the repository at this point in the history
  11. fix dependencies

    Retrospected committed Jan 15, 2024
    Configuration menu
    Copy the full SHA
    6f008f2 View commit details
    Browse the repository at this point in the history
  12. packages.config fix

    Retrospected committed Jan 15, 2024
    Configuration menu
    Copy the full SHA
    b9127c9 View commit details
    Browse the repository at this point in the history
  13. restore packages.config

    Retrospected committed Jan 15, 2024
    Configuration menu
    Copy the full SHA
    41d22f6 View commit details
    Browse the repository at this point in the history
  14. update howto

    Retrospected committed Jan 15, 2024
    Configuration menu
    Copy the full SHA
    0147096 View commit details
    Browse the repository at this point in the history

Commits on Jan 16, 2024

  1. init

    Retrospected committed Jan 16, 2024
    Configuration menu
    Copy the full SHA
    e9c702d View commit details
    Browse the repository at this point in the history
  2. init

    Retrospected committed Jan 16, 2024
    Configuration menu
    Copy the full SHA
    9c3b8e6 View commit details
    Browse the repository at this point in the history

Commits on Jan 25, 2024

  1. add response handling

    Retrospected committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    bf34d0a View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    8bb5ecd View commit details
    Browse the repository at this point in the history
  3. Configuration menu
    Copy the full SHA
    599c0e7 View commit details
    Browse the repository at this point in the history
  4. working connection

    Retrospected committed Jan 25, 2024
    Configuration menu
    Copy the full SHA
    542716e View commit details
    Browse the repository at this point in the history

Commits on Jan 28, 2024

  1. commit

    Retrospected committed Jan 28, 2024
    Configuration menu
    Copy the full SHA
    9c1a62f View commit details
    Browse the repository at this point in the history
  2. commit

    Retrospected committed Jan 28, 2024
    Configuration menu
    Copy the full SHA
    e816dde View commit details
    Browse the repository at this point in the history

Commits on Jan 29, 2024

  1. Initial Branch Creation

    Branch Creation, Copy of Main currently
    DragoQCC committed Jan 29, 2024
    Configuration menu
    Copy the full SHA
    22c7873 View commit details
    Browse the repository at this point in the history

Commits on Jan 30, 2024

  1. Configuration menu
    Copy the full SHA
    0530323 View commit details
    Browse the repository at this point in the history

Commits on Jan 31, 2024

  1. Configuration menu
    Copy the full SHA
    2cfe9f1 View commit details
    Browse the repository at this point in the history

Commits on Feb 1, 2024

  1. add newtonsoft package

    Retrospected committed Feb 1, 2024
    Configuration menu
    Copy the full SHA
    7557bc4 View commit details
    Browse the repository at this point in the history
  2. working poll setup

    Retrospected committed Feb 1, 2024
    Configuration menu
    Copy the full SHA
    c1717ec View commit details
    Browse the repository at this point in the history
  3. Configuration menu
    Copy the full SHA
    af7f70e View commit details
    Browse the repository at this point in the history
  4. Configuration menu
    Copy the full SHA
    c851bed View commit details
    Browse the repository at this point in the history
  5. Configuration menu
    Copy the full SHA
    2110bec View commit details
    Browse the repository at this point in the history
  6. fixing build arguments

    Retrospected committed Feb 1, 2024
    Configuration menu
    Copy the full SHA
    8fe84c0 View commit details
    Browse the repository at this point in the history
  7. print keys as test

    Retrospected committed Feb 1, 2024
    Configuration menu
    Copy the full SHA
    cf6b800 View commit details
    Browse the repository at this point in the history
  8. Configuration menu
    Copy the full SHA
    257fe5a View commit details
    Browse the repository at this point in the history

Commits on Feb 2, 2024

  1. removing debug prints

    Retrospected authored Feb 2, 2024
    Configuration menu
    Copy the full SHA
    b95c8aa View commit details
    Browse the repository at this point in the history
  2. Updated Apollo to use modern csproj format and enable runtime agnosti…

    …c language features from newer versions of C#
    
    Updated Apollo to use modern csproj format and enable runtime agnostic language features from newer versions of C#. Also updated the included Nuget packages for Fody. Introduced the PolySharp package to allow the use of runtime agnostic language features up to the latest version of C#.  The modern csproj format allows Apollo to be built with the dotnet SDK allowing a consistent build experience across operating systems.
    DragoQCC committed Feb 2, 2024
    Configuration menu
    Copy the full SHA
    aeb2ef1 View commit details
    Browse the repository at this point in the history

Commits on Feb 3, 2024

  1. Configuration menu
    Copy the full SHA
    59edcac View commit details
    Browse the repository at this point in the history

Commits on Feb 4, 2024

  1. Configuration menu
    Copy the full SHA
    25557d0 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    0e9d0d0 View commit details
    Browse the repository at this point in the history

Commits on Feb 5, 2024

  1. Configuration menu
    Copy the full SHA
    c997bae View commit details
    Browse the repository at this point in the history
  2. adding documentation

    Retrospected committed Feb 5, 2024
    Configuration menu
    Copy the full SHA
    9cf370a View commit details
    Browse the repository at this point in the history
  3. Feature/coffloader (#1)

    * init coffloader
    
    * allowing unsafe code compilation
    
    * fixed code paths not returning
    
    * if compile for any, compile for x64
    
    * update proj differences
    
    * adding code path
    
    * default compile for 64bit
    
    * try any cpu compile options
    
    * adding fodyweavers
    
    * working compile configs
    
    * fix dependencies
    
    * packages.config fix
    
    * restore packages.config
    
    * update howto
    
    * adding documentation
    Retrospected authored Feb 5, 2024
    Configuration menu
    Copy the full SHA
    ac13141 View commit details
    Browse the repository at this point in the history
  4. Add documentation

    Retrospected committed Feb 5, 2024
    Configuration menu
    Copy the full SHA
    16140f9 View commit details
    Browse the repository at this point in the history
  5. Configuration menu
    Copy the full SHA
    963af7a View commit details
    Browse the repository at this point in the history
  6. cleanup

    Retrospected committed Feb 5, 2024
    Configuration menu
    Copy the full SHA
    5b3ff4b View commit details
    Browse the repository at this point in the history
  7. cleanup

    Retrospected committed Feb 5, 2024
    Configuration menu
    Copy the full SHA
    6b5a8bc View commit details
    Browse the repository at this point in the history
  8. cleanup

    Retrospected committed Feb 5, 2024
    Configuration menu
    Copy the full SHA
    1e1eb3a View commit details
    Browse the repository at this point in the history

Commits on Feb 6, 2024

  1. Configuration menu
    Copy the full SHA
    f5f78e2 View commit details
    Browse the repository at this point in the history

Commits on Feb 7, 2024

  1. stability fixes

    Retrospected committed Feb 7, 2024
    Configuration menu
    Copy the full SHA
    4cedff4 View commit details
    Browse the repository at this point in the history

Commits on Feb 8, 2024

  1. Introduced the DebugHelp class to ApolloInterop, fixed double quote b…

    …ug for execute_pe command, fixed some execute_pe related errors not showing as errors in the ui.
    
    - Introduced the DebugHelp class to ApolloInterop
    - DebugHelp functions are set to only be included when building in debug mode
    - Fixed double quote bug for execute_pe command by modfying execute_pe.py to take a array as the argument type and adjusting the agent code to handle that as well
    - Fixed some execute_pe related errors not showing as errors in the ui
    - Fixed Costura not being included in weavers list after nuget package upgrade
    - Added OS check to some python files to set a different directory to search when executing on windows vs linux/mac
    - Added donut.exe so shellcode can be build when testing from a windows host
    - Cleanup of the Screenshot.cs code to use a more modern structure for disposable statements
    DragoQCC committed Feb 8, 2024
    Configuration menu
    Copy the full SHA
    474ce04 View commit details
    Browse the repository at this point in the history

Commits on Feb 15, 2024

  1. Enables BOF/COFF loading support from PR #125 , slight modifications …

    …made to update pr .net version to be inline with recent update and decouple the compile time dependency.
    
    Enables BOF/COFF loading support from PR #125 , slight modifications made to update the pr .net version to be in line with the recent updates and decouple the compile time dependency.
    - To remove the build requirement of including runof as a project reference in the Tasks project the RunOF.dll should instead be registered before invoking execute_coff. It only needs to be registered once.
    
    - Modified execute_coff.py to properly parse bof arguments when a value contained a `:` character. ex. `-Z:C:\Windows\System32\`
    DragoQCC committed Feb 15, 2024
    Configuration menu
    Copy the full SHA
    228b188 View commit details
    Browse the repository at this point in the history

Commits on Feb 22, 2024

  1. update to fix system.automation being ignored from git repo

    update to fix system.automation being ignored from git repo
    DragoQCC committed Feb 22, 2024
    Configuration menu
    Copy the full SHA
    a8482a8 View commit details
    Browse the repository at this point in the history
  2. update to screenshot.cs to not set a specific bitmap format

    update to screenshot.cs to not set a specific bitmap format
    DragoQCC committed Feb 22, 2024
    Configuration menu
    Copy the full SHA
    9939912 View commit details
    Browse the repository at this point in the history
  3. Restored costura in a few fody weaver files that got removed during c…

    …leanup
    
    Restored costura in a few fody weaver files that got removed during cleanup
    DragoQCC committed Feb 22, 2024
    Configuration menu
    Copy the full SHA
    5066610 View commit details
    Browse the repository at this point in the history
  4. updating for linux environments

    Updated Dockerfile and various builder commands to use donet instead of msbuild, also refactored a few of the python functions to not need subtasking
    its-a-feature committed Feb 22, 2024
    Configuration menu
    Copy the full SHA
    1ac4d7b View commit details
    Browse the repository at this point in the history
  5. Configuration menu
    Copy the full SHA
    a34e3da View commit details
    Browse the repository at this point in the history
  6. Configuration menu
    Copy the full SHA
    e755042 View commit details
    Browse the repository at this point in the history
  7. Configuration menu
    Copy the full SHA
    a0e286a View commit details
    Browse the repository at this point in the history
  8. Configuration menu
    Copy the full SHA
    2f16646 View commit details
    Browse the repository at this point in the history

Commits on Feb 28, 2024

  1. Configuration menu
    Copy the full SHA
    561c098 View commit details
    Browse the repository at this point in the history

Commits on Mar 7, 2024

  1. Configuration menu
    Copy the full SHA
    74a88e9 View commit details
    Browse the repository at this point in the history

Commits on Mar 12, 2024

  1. Fixed missing weaver for execute assembly preventing container builds…

    … from properly loading the command. Added more context to the execute assembly error message.
    
    Fixed missing weaver for execute assembly preventing container builds from properly loading the command. Added more context to the execute assembly error message.
    DragoQCC committed Mar 12, 2024
    Configuration menu
    Copy the full SHA
    79d37c4 View commit details
    Browse the repository at this point in the history

Commits on Mar 13, 2024

  1. Cleanup old packages and csproj files

    Cleanup old packages and csproj files
    DragoQCC committed Mar 13, 2024
    Configuration menu
    Copy the full SHA
    3157299 View commit details
    Browse the repository at this point in the history
  2. Fix to inline assembly to produce better error messages when executio…

    …n fails, update to execute_pe to allow commands like mimikatz to handle multiple arguments correctly
    
    Fix to inline assembly to produce better error messages when execution fails, update to execute_pe to allow commands like mimikatz to handle multiple arguments correctly.
    DragoQCC committed Mar 13, 2024
    Configuration menu
    Copy the full SHA
    658852b View commit details
    Browse the repository at this point in the history
  3. Tested the websocket addition from pr #126 & updated it to use .net f…

    …ramework 4.5 and the sdk project style to work with the recent upgrade to mythic
    
    Tested the WebSocket addition from pr #126 & updated it to use .net framework 4.5 and the sdk project style to work with the recent upgrade to mythic
    DragoQCC committed Mar 13, 2024
    Configuration menu
    Copy the full SHA
    2fdf456 View commit details
    Browse the repository at this point in the history

Commits on Mar 14, 2024

  1. Updated execute_coff to obtain RunOF.dll if it is not already present…

    … in apollo, also updated python file to account for windows build file paths for easier debugging.
    
    Updated execute_coff to obtain RunOF.dll if it is not already present in apollo, also updated python file to account for windows build file paths for easier debugging.
    DragoQCC committed Mar 14, 2024
    Configuration menu
    Copy the full SHA
    0936ad9 View commit details
    Browse the repository at this point in the history
  2. fix for websocket package references

    fix for websocket package references
    DragoQCC committed Mar 14, 2024
    Configuration menu
    Copy the full SHA
    4e9c1b0 View commit details
    Browse the repository at this point in the history

Commits on Mar 20, 2024

  1. Rename of the Task , TaskStatus, and TaskResponse structs to be Mythi…

    …c* to better denote them from the built in Task class and its structs by the same name
    
    Rename of the Task , TaskStatus, and TaskResponse structs to be Mythic* to better denote them from the built in Task class and its structs by the same name
    DragoQCC committed Mar 20, 2024
    Configuration menu
    Copy the full SHA
    6e66242 View commit details
    Browse the repository at this point in the history

Commits on Mar 21, 2024

  1. Update to reg edit command to properly parse arguments based on position

    Update to reg edit command to properly parse arguments based on position , added windows directory to powerpick command for easier troubleshooting
    DragoQCC committed Mar 21, 2024
    Configuration menu
    Copy the full SHA
    e520cd7 View commit details
    Browse the repository at this point in the history

Commits on Apr 9, 2024

  1. Added a wmiExecute command which performs execution of a process usin…

    …g wmi but does not return any output
    
    Added a wmiExecute command which performs execution of a process using wmi but does not return any output, a host and creds can be provided to perform remote execution.
    DragoQCC committed Apr 9, 2024
    Configuration menu
    Copy the full SHA
    994a761 View commit details
    Browse the repository at this point in the history

Commits on Apr 10, 2024

  1. Fixes to spawning a process after steal token is performed as system.

    Fixes to spawning a process after steal token is performed as system.  Added a local file path to psinject when debugging on windows.
    DragoQCC committed Apr 10, 2024
    Configuration menu
    Copy the full SHA
    00d613e View commit details
    Browse the repository at this point in the history
  2. Update to wmiExecute to fix error when optional values are not provided

    Update to wmiExecute to fix error when optional values are not provided
    DragoQCC committed Apr 10, 2024
    Configuration menu
    Copy the full SHA
    a5d8648 View commit details
    Browse the repository at this point in the history

Commits on Apr 29, 2024

  1. Cleanup of unnecessary using statements

    Cleanup of unnecessary using statements
    DragoQCC committed Apr 29, 2024
    Configuration menu
    Copy the full SHA
    8bf2fda View commit details
    Browse the repository at this point in the history
  2. Introduction of the KerberosTicket module and supporting interfaces a…

    …nd types to the project.
    
    Introduction of the KerberosTicket module and supporting interfaces and types to the project.
    this adds a few new commands to help with managing kerberos tickets from within Apollo.
    - Ticket_Cache_* - these commands alter the current logon session by listing, extracting, adding or removing tickets
    - Ticket_store_* - These commands alter a in memory list to store and track tickets.
    
    When a medium integrity user executes a fork-&-run after loading into a new credential state such as after make_token, the tickets stored in the ticket store can be automatically loaded into each new LUID the system gives to keep the tickets loaded as Apollo spawns new processes.
    DragoQCC committed Apr 29, 2024
    Configuration menu
    Copy the full SHA
    9812da4 View commit details
    Browse the repository at this point in the history

Commits on Apr 30, 2024

  1. Added docs to kerberos ticket commands, modified cache purge command …

    …to take the service & domain name.
    
    Added docs to kerberos ticket commands, modified cache purge command to take the service & domain name. Added support for returning artifacts from the kerberos module.
    DragoQCC committed Apr 30, 2024
    Configuration menu
    Copy the full SHA
    880c88a View commit details
    Browse the repository at this point in the history

Commits on May 1, 2024

  1. fixed tickets from ticket_store_add not having the base64 ticket val…

    …ue stored correctly, fixed purge not taking into account the format of service ticket
    
     fixed tickets from ticket_store_add not having the base64 ticket value stored correctly, fixed purge not taking into account the format of service tickets
    DragoQCC committed May 1, 2024
    Configuration menu
    Copy the full SHA
    023e377 View commit details
    Browse the repository at this point in the history
  2. Updated ticket_purge commands to use full service name to avoid consi…

    …stency issues
    
    Updated ticket_purge commands to use full service name to avoid consistency issues
    DragoQCC committed May 1, 2024
    Configuration menu
    Copy the full SHA
    5bf4ecc View commit details
    Browse the repository at this point in the history

Commits on May 4, 2024

  1. Configuration menu
    Copy the full SHA
    1380c57 View commit details
    Browse the repository at this point in the history

Commits on May 10, 2024

  1. Configuration menu
    Copy the full SHA
    4474d83 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    b3f4873 View commit details
    Browse the repository at this point in the history

Commits on May 14, 2024

  1. Fixed inline assembly so it will continue execution even if it fails …

    …to properly load the first time
    
    Fixed inline assembly so it will continue execution even if it fails to properly load the first time
    DragoQCC committed May 14, 2024
    Configuration menu
    Copy the full SHA
    6f00a38 View commit details
    Browse the repository at this point in the history
  2. Merge pull request #130 from MythicAgents/2024Q1-Dev

    Fixed inline assembly so it will continue execution even if it fails …
    its-a-feature authored May 14, 2024
    Configuration menu
    Copy the full SHA
    05c7d4f View commit details
    Browse the repository at this point in the history

Commits on Jun 20, 2024

  1. Add vscode workspace file

    MEhrn00 committed Jun 20, 2024
    Configuration menu
    Copy the full SHA
    1685843 View commit details
    Browse the repository at this point in the history

Commits on Jun 21, 2024

  1. Restore get_injection_techniques.js browser script

    Undelete get_injection_techniques.js browser script which was removed in
    7860abf
    MEhrn00 committed Jun 21, 2024
    Configuration menu
    Copy the full SHA
    8917be0 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    3781cbd View commit details
    Browse the repository at this point in the history
  3. Add editorconfig files

    MEhrn00 committed Jun 21, 2024
    Configuration menu
    Copy the full SHA
    5b2ffd9 View commit details
    Browse the repository at this point in the history
  4. Add prefixes to profile build parameters

    Prefixes the profile build parameters with the profile name in order to
    resolve any profile parameter naming conflicts. The AESPSK build
    parameter needs to be updated when per-profile crypto support is added.
    MEhrn00 committed Jun 21, 2024
    Configuration menu
    Copy the full SHA
    f6a43cf View commit details
    Browse the repository at this point in the history

Commits on Jul 3, 2024

  1. Configuration menu
    Copy the full SHA
    1ec8d0f View commit details
    Browse the repository at this point in the history

Commits on Jul 8, 2024

  1. Merge pull request #134 from MEhrn00/readme-fix

    Fix README.md table formatting
    its-a-feature authored Jul 8, 2024
    Configuration menu
    Copy the full SHA
    a799f16 View commit details
    Browse the repository at this point in the history
  2. Merge pull request #133 from MEhrn00/profile-prefix

    Add prefixes to profile build parameters
    its-a-feature authored Jul 8, 2024
    Configuration menu
    Copy the full SHA
    432f6b3 View commit details
    Browse the repository at this point in the history
  3. Merge pull request #132 from MEhrn00/injection-browserscript

    Restore get_injection_techniques.js browser script
    its-a-feature authored Jul 8, 2024
    Configuration menu
    Copy the full SHA
    092a851 View commit details
    Browse the repository at this point in the history
  4. Merge pull request #131 from MEhrn00/vscode-files

    Add VS Code metadata files
    its-a-feature authored Jul 8, 2024
    Configuration menu
    Copy the full SHA
    cf8a5be View commit details
    Browse the repository at this point in the history

Commits on Jul 10, 2024

  1. Configuration menu
    Copy the full SHA
    1e3b854 View commit details
    Browse the repository at this point in the history

Commits on Jul 16, 2024

  1. Add build checks

    Includes build checks which will fail the build when
    a mix of egress and P2P C2 profiles are selected and
    returns a failed message when trying to build in plaintext mode.
    MEhrn00 committed Jul 16, 2024
    Configuration menu
    Copy the full SHA
    4904949 View commit details
    Browse the repository at this point in the history

Commits on Jul 17, 2024

  1. Fix ls stripping trailing slash

    Reworks ls command line processing to fix an issue where Apollo could
    not list drive letters. Includes additional processing to handle edge
    cases when named cli arguments are passed with free form args
    MEhrn00 committed Jul 17, 2024
    Configuration menu
    Copy the full SHA
    04382e2 View commit details
    Browse the repository at this point in the history
  2. Merge pull request #135 from MEhrn00/build-checks

    Add build checks when building with an invalid configuration
    its-a-feature authored Jul 17, 2024
    Configuration menu
    Copy the full SHA
    d98af57 View commit details
    Browse the repository at this point in the history

Commits on Jul 18, 2024

  1. Autoformat upload.cs

    MEhrn00 committed Jul 18, 2024
    Configuration menu
    Copy the full SHA
    3f1fb2a View commit details
    Browse the repository at this point in the history
  2. Suppress upload.cs uninitalized field warnings

    The dotnet compiler flags the upload parameter fields as never initialized.
    This is because those structure fields are derived from the deserialized
    tasking json. These warnings can be suppressed since there is no way
    to tell the compiler that these fields are initialized externally
    MEhrn00 committed Jul 18, 2024
    Configuration menu
    Copy the full SHA
    43e903c View commit details
    Browse the repository at this point in the history
  3. Autoformat upload.py

    MEhrn00 committed Jul 18, 2024
    Configuration menu
    Copy the full SHA
    64c09c6 View commit details
    Browse the repository at this point in the history
  4. Configuration menu
    Copy the full SHA
    893c724 View commit details
    Browse the repository at this point in the history
  5. Autoformat PathUtils.cs

    MEhrn00 committed Jul 18, 2024
    Configuration menu
    Copy the full SHA
    64d35a1 View commit details
    Browse the repository at this point in the history
  6. Fix issue with upload returning wrong path case

    The upload command would return back the uploaded file path without the proper
    casing of the path getting resolved. This caused issues with the file browser.
    This resolves the proper upload path and registers that with Mythic
    MEhrn00 committed Jul 18, 2024
    Configuration menu
    Copy the full SHA
    c348ec3 View commit details
    Browse the repository at this point in the history

Commits on Jul 30, 2024

  1. Add typed IPC message for execute_pe

    Send IPC messages to the execute_pe sacrificial process as a strongly
    typed JSON string instead of combining everything into a space separated
    string
    MEhrn00 committed Jul 30, 2024
    Configuration menu
    Copy the full SHA
    bf2e146 View commit details
    Browse the repository at this point in the history
  2. Cleanup ExecutePE files

    Remove redundant preprocessor directives and clean out whitespace
    MEhrn00 committed Jul 30, 2024
    Configuration menu
    Copy the full SHA
    ee364f7 View commit details
    Browse the repository at this point in the history
  3. Modify Mythic response status field

    Have the status field be optional for the Mythic task responses
    to leave the status of the command unchanged when not specified
    MEhrn00 committed Jul 30, 2024
    Configuration menu
    Copy the full SHA
    20ede32 View commit details
    Browse the repository at this point in the history
  4. Cleanup execute_pe.py

    Run autoformatters and cleanup trailing whitespace
    MEhrn00 committed Jul 30, 2024
    Configuration menu
    Copy the full SHA
    190ef75 View commit details
    Browse the repository at this point in the history
  5. Change execute_pe.py argument handling

    Move execute_pe command line processing to the Mythic server side code
    and accept execute_pe arguments as a single string instead of an array
    of strings
    MEhrn00 committed Jul 30, 2024
    Configuration menu
    Copy the full SHA
    a2eea6c View commit details
    Browse the repository at this point in the history
  6. Change Apollo execute_pe processing

    Changes how execute_pe handles the PE command line by taking in the
    command line directly from Mythic instead of parsing it in the agent.
    Modifies execute_pe implementation to return back more verbose errors
    MEhrn00 committed Jul 30, 2024
    Configuration menu
    Copy the full SHA
    5bedc30 View commit details
    Browse the repository at this point in the history
  7. Add ExecutePE.Standalone

    Include an ExecutePE.Standalone project which allows running the
    execute_pe task module as a command line program. Used for debugging
    MEhrn00 committed Jul 30, 2024
    Configuration menu
    Copy the full SHA
    e1f248e View commit details
    Browse the repository at this point in the history
  8. Cleanup mimikatz.py

    Run autoformatters and cleanup whitespace
    MEhrn00 committed Jul 30, 2024
    Configuration menu
    Copy the full SHA
    d34149c View commit details
    Browse the repository at this point in the history
  9. Change Mimikatz command line handling

    Quote Mimikatz command line parameters. Process arrays of Mimikatz
    commands from the modal properly
    MEhrn00 committed Jul 30, 2024
    Configuration menu
    Copy the full SHA
    1648f60 View commit details
    Browse the repository at this point in the history
  10. Cleanup pth.py

    Run autoformatters and cleanup whitespace
    MEhrn00 committed Jul 30, 2024
    Configuration menu
    Copy the full SHA
    4973aa4 View commit details
    Browse the repository at this point in the history
  11. Fix pth command

    Changes the pth command to work with the changed execute_pe. Fixes
    issues where pth would return a success but no output and allows
    selecting credentials from the modal
    MEhrn00 committed Jul 30, 2024
    Configuration menu
    Copy the full SHA
    f33e3b5 View commit details
    Browse the repository at this point in the history
  12. Cleanup dcsync.py

    Run autoformatters and cleanup whitespace
    MEhrn00 committed Jul 30, 2024
    Configuration menu
    Copy the full SHA
    18976b1 View commit details
    Browse the repository at this point in the history
  13. Fixes for dcsync command

    Change command line processing to work with new execute_pe
    implementation. Fix issues when trying to issue dcsync task through the
    modal
    MEhrn00 committed Jul 30, 2024
    Configuration menu
    Copy the full SHA
    11ccc43 View commit details
    Browse the repository at this point in the history
  14. Cleanup execute_assembly.py

    Run autoformatters and remove unused imports
    MEhrn00 committed Jul 30, 2024
    Configuration menu
    Copy the full SHA
    8c1e512 View commit details
    Browse the repository at this point in the history
  15. Cleanup execute_assembly.cs

    Run autoformatters
    MEhrn00 committed Jul 30, 2024
    Configuration menu
    Copy the full SHA
    f3a0555 View commit details
    Browse the repository at this point in the history
  16. Configuration menu
    Copy the full SHA
    345026e View commit details
    Browse the repository at this point in the history
  17. Change execute_assembly.cs error handling semantics

    Make execute_assembly tasking throw exceptions for any task errors and
    return the error status to Mythic
    MEhrn00 committed Jul 30, 2024
    Configuration menu
    Copy the full SHA
    425f198 View commit details
    Browse the repository at this point in the history
  18. Add error propogation to execute assembly

    Send back inner assembly exception messages to Mythic and ensure all the
    messages are sent successfully
    MEhrn00 committed Jul 30, 2024
    Configuration menu
    Copy the full SHA
    379935d View commit details
    Browse the repository at this point in the history

Commits on Jul 31, 2024

  1. Refactor and fix ls browser script

    Fix issue where ls browser script fails when listing a single file.
    Refactor browser script to remove complex logic. Added timstamp times
    and inherited acl information
    MEhrn00 committed Jul 31, 2024
    Configuration menu
    Copy the full SHA
    bb214ef View commit details
    Browse the repository at this point in the history
  2. Support multiple IPs in initial checkin

    Add support for returning multiple IP addresses in the initial checkin.
    IP addresses are returned with a preferential order with interfaces
    containing a gateway address and IPv4 addresses having a higher
    preference. This will help better display a default IP address in Mythic
    during the first checkin
    
    Fixes: #118
    Closes: #119
    MEhrn00 committed Jul 31, 2024
    Configuration menu
    Copy the full SHA
    ff7d752 View commit details
    Browse the repository at this point in the history
  3. Merge pull request #141 from MEhrn00/multiple-ips

    Support multiple IPs in initial checkin
    its-a-feature authored Jul 31, 2024
    Configuration menu
    Copy the full SHA
    df26ad4 View commit details
    Browse the repository at this point in the history
  4. Merge pull request #140 from MEhrn00/ls-browserscript

    Refactor and fix ls browser script bugs
    its-a-feature authored Jul 31, 2024
    Configuration menu
    Copy the full SHA
    ace1cf8 View commit details
    Browse the repository at this point in the history

Commits on Aug 1, 2024

  1. Merge pull request #139 from MEhrn00/execute-assembly-changes

    Add target exception propagation for execute assembly
    its-a-feature authored Aug 1, 2024
    Configuration menu
    Copy the full SHA
    bd3615b View commit details
    Browse the repository at this point in the history
  2. Merge pull request #138 from MEhrn00/mimikatz-fixes

    Fixes for Mimikatz and changes to Execute PE implementation
    its-a-feature authored Aug 1, 2024
    Configuration menu
    Copy the full SHA
    d31718d View commit details
    Browse the repository at this point in the history
  3. Merge pull request #137 from MEhrn00/upload-casing

    Resolve path casing in file uploads
    its-a-feature authored Aug 1, 2024
    Configuration menu
    Copy the full SHA
    281ab0f View commit details
    Browse the repository at this point in the history
  4. Merge pull request #136 from MEhrn00/ls-slash

    Fix ls stripping trailing slash
    its-a-feature authored Aug 1, 2024
    Configuration menu
    Copy the full SHA
    67bbbb0 View commit details
    Browse the repository at this point in the history
  5. Configuration menu
    Copy the full SHA
    df557ca View commit details
    Browse the repository at this point in the history
  6. Configuration menu
    Copy the full SHA
    c37405b View commit details
    Browse the repository at this point in the history
  7. Configuration menu
    Copy the full SHA
    b6db8df View commit details
    Browse the repository at this point in the history
  8. updating pypi version

    its-a-feature committed Aug 1, 2024
    Configuration menu
    Copy the full SHA
    0b1607d View commit details
    Browse the repository at this point in the history
  9. Configuration menu
    Copy the full SHA
    8111232 View commit details
    Browse the repository at this point in the history
  10. Configuration menu
    Copy the full SHA
    99cb770 View commit details
    Browse the repository at this point in the history

Commits on Aug 2, 2024

  1. Configuration menu
    Copy the full SHA
    70f6748 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    ef978ce View commit details
    Browse the repository at this point in the history
  3. updates for subtasking

    its-a-feature committed Aug 2, 2024
    Configuration menu
    Copy the full SHA
    658037f View commit details
    Browse the repository at this point in the history
  4. Configuration menu
    Copy the full SHA
    3b2fe08 View commit details
    Browse the repository at this point in the history
  5. Configuration menu
    Copy the full SHA
    9cf563a View commit details
    Browse the repository at this point in the history

Commits on Aug 12, 2024

  1. update pypi version

    its-a-feature committed Aug 12, 2024
    Configuration menu
    Copy the full SHA
    9f96bc7 View commit details
    Browse the repository at this point in the history

Commits on Aug 13, 2024

  1. Configuration menu
    Copy the full SHA
    2921e04 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    c55bd73 View commit details
    Browse the repository at this point in the history
  3. Add section initialized data check

    Add section header check which will only copy the section data if the IMAGE_SCN_CNT_INITIALIZED_DATA flag is set. Without this flag, the pointer to raw data is 0
    MEhrn00 committed Aug 13, 2024
    Configuration menu
    Copy the full SHA
    999b8a0 View commit details
    Browse the repository at this point in the history
  4. Add mem discardable check

    Discard PE sections which are marked as discardable
    MEhrn00 committed Aug 13, 2024
    Configuration menu
    Copy the full SHA
    cb6f017 View commit details
    Browse the repository at this point in the history
  5. Configuration menu
    Copy the full SHA
    f43f83e View commit details
    Browse the repository at this point in the history
  6. Fix PE section size calculation

    Use largest of the VirtualSize and SizeOfRawData fields to calculate the section size
    MEhrn00 committed Aug 13, 2024
    Configuration menu
    Copy the full SHA
    b195680 View commit details
    Browse the repository at this point in the history

Commits on Aug 14, 2024

  1. Fix relocations

    Handle different relocation types and change relocation logic
    MEhrn00 committed Aug 14, 2024
    Configuration menu
    Copy the full SHA
    ddfd192 View commit details
    Browse the repository at this point in the history
  2. Fix ImageBase patch and remove GetModuleHandle hook

    Fix issue with new ImageBaseAddress not getting patched successfully.
    Remove GetModuleHandle hook since it is not needed
    MEhrn00 committed Aug 14, 2024
    Configuration menu
    Copy the full SHA
    2c4f31e View commit details
    Browse the repository at this point in the history

Commits on Aug 15, 2024

  1. Configuration menu
    Copy the full SHA
    2f3f388 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    96788a6 View commit details
    Browse the repository at this point in the history
  3. Configuration menu
    Copy the full SHA
    9bf18ea View commit details
    Browse the repository at this point in the history

Commits on Aug 16, 2024

  1. Configuration menu
    Copy the full SHA
    c2dc26c View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    5696941 View commit details
    Browse the repository at this point in the history
  3. Configuration menu
    Copy the full SHA
    6525e27 View commit details
    Browse the repository at this point in the history
  4. Add Execute PE IAT hooks

    Sets up system for inserting IAT hooks in loaded PEs. Adds IAT hook for
    __wgetmainargs to set up args properly for msvcrt programs
    MEhrn00 committed Aug 16, 2024
    Configuration menu
    Copy the full SHA
    b0a8326 View commit details
    Browse the repository at this point in the history
  5. Configuration menu
    Copy the full SHA
    1a6731b View commit details
    Browse the repository at this point in the history
  6. Configuration menu
    Copy the full SHA
    ef25636 View commit details
    Browse the repository at this point in the history
  7. Configuration menu
    Copy the full SHA
    5d99e37 View commit details
    Browse the repository at this point in the history
  8. Configuration menu
    Copy the full SHA
    638c2e1 View commit details
    Browse the repository at this point in the history

Commits on Aug 17, 2024

  1. Fix warnings in PEMapper.cs

    MEhrn00 committed Aug 17, 2024
    Configuration menu
    Copy the full SHA
    07a9d71 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    fa767d7 View commit details
    Browse the repository at this point in the history
  3. Change execute PE stdio handling

    Changes the sacrificial process stdio handling to have Apollo read
    directly from the sacrificial process' stdio stream rather than the
    sacrificial process setting up stdio redirection. Removes need for
    cleaning up patches since the native process can now call its exit
    routines without issue. Modifies Apollo sacrificial process handling
    to read from the stdio handles rather than the initial named pipe
    MEhrn00 committed Aug 17, 2024
    Configuration menu
    Copy the full SHA
    b319895 View commit details
    Browse the repository at this point in the history
  4. mimikatz parsing update

    its-a-feature committed Aug 17, 2024
    Configuration menu
    Copy the full SHA
    d4669c4 View commit details
    Browse the repository at this point in the history
  5. Merge pull request #142 from MEhrn00/peloader-fixes

    Peloader fixes
    its-a-feature authored Aug 17, 2024
    Configuration menu
    Copy the full SHA
    19c63a9 View commit details
    Browse the repository at this point in the history
  6. updated printspoofer

    its-a-feature committed Aug 17, 2024
    Configuration menu
    Copy the full SHA
    47d052e View commit details
    Browse the repository at this point in the history
  7. Configuration menu
    Copy the full SHA
    4055628 View commit details
    Browse the repository at this point in the history
  8. Format Process.cs

    MEhrn00 committed Aug 17, 2024
    Configuration menu
    Copy the full SHA
    bcf8c36 View commit details
    Browse the repository at this point in the history
  9. Add more verbose error reporting to execute PE

    Include non-zero exit codes in responses and NTSTATUS message for NT error codes
    MEhrn00 committed Aug 17, 2024
    Configuration menu
    Copy the full SHA
    191c2b0 View commit details
    Browse the repository at this point in the history
  10. Merge pull request #143 from MEhrn00/peloader-fixes

    More verbose execute PE error responses
    its-a-feature authored Aug 17, 2024
    Configuration menu
    Copy the full SHA
    93c80d6 View commit details
    Browse the repository at this point in the history
  11. Configuration menu
    Copy the full SHA
    f5c00ac View commit details
    Browse the repository at this point in the history

Commits on Aug 20, 2024

  1. Configuration menu
    Copy the full SHA
    2f2211d View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    2c29380 View commit details
    Browse the repository at this point in the history
  3. Configuration menu
    Copy the full SHA
    6645cb6 View commit details
    Browse the repository at this point in the history
  4. Configuration menu
    Copy the full SHA
    4a6fc2a View commit details
    Browse the repository at this point in the history
  5. Configuration menu
    Copy the full SHA
    d3acdfa View commit details
    Browse the repository at this point in the history
  6. Configuration menu
    Copy the full SHA
    6fd539c View commit details
    Browse the repository at this point in the history
  7. Configuration menu
    Copy the full SHA
    cca3cc3 View commit details
    Browse the repository at this point in the history

Commits on Aug 21, 2024

  1. Configuration menu
    Copy the full SHA
    138453d View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    b0f10e8 View commit details
    Browse the repository at this point in the history
  3. fixing variable names

    its-a-feature committed Aug 21, 2024
    Configuration menu
    Copy the full SHA
    d533f4e View commit details
    Browse the repository at this point in the history
  4. Configuration menu
    Copy the full SHA
    72ddbec View commit details
    Browse the repository at this point in the history
  5. Configuration menu
    Copy the full SHA
    2bb458f View commit details
    Browse the repository at this point in the history
  6. Configuration menu
    Copy the full SHA
    edb3c29 View commit details
    Browse the repository at this point in the history
  7. Configuration menu
    Copy the full SHA
    8b4ad5b View commit details
    Browse the repository at this point in the history

Commits on Aug 22, 2024

  1. Configuration menu
    Copy the full SHA
    4083ca6 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    8485b0d View commit details
    Browse the repository at this point in the history

Commits on Aug 28, 2024

  1. Configuration menu
    Copy the full SHA
    793448e View commit details
    Browse the repository at this point in the history
  2. updating pypi

    its-a-feature committed Aug 28, 2024
    Configuration menu
    Copy the full SHA
    6cd5532 View commit details
    Browse the repository at this point in the history
  3. Configuration menu
    Copy the full SHA
    ad99f2d View commit details
    Browse the repository at this point in the history

Commits on Aug 31, 2024

  1. Configuration menu
    Copy the full SHA
    114f2ad View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    bc3b43c View commit details
    Browse the repository at this point in the history
  3. Configuration menu
    Copy the full SHA
    1fa7a2a View commit details
    Browse the repository at this point in the history
  4. Configuration menu
    Copy the full SHA
    4392afd View commit details
    Browse the repository at this point in the history
  5. fixing donut args

    its-a-feature committed Aug 31, 2024
    Configuration menu
    Copy the full SHA
    1354c7b View commit details
    Browse the repository at this point in the history
  6. Configuration menu
    Copy the full SHA
    3f20a52 View commit details
    Browse the repository at this point in the history
  7. update donut args

    its-a-feature committed Aug 31, 2024
    Configuration menu
    Copy the full SHA
    42872a3 View commit details
    Browse the repository at this point in the history
  8. Configuration menu
    Copy the full SHA
    524aeee View commit details
    Browse the repository at this point in the history
  9. Configuration menu
    Copy the full SHA
    a9002ae View commit details
    Browse the repository at this point in the history
  10. updating pathing

    its-a-feature committed Aug 31, 2024
    Configuration menu
    Copy the full SHA
    ae63374 View commit details
    Browse the repository at this point in the history
  11. Configuration menu
    Copy the full SHA
    1b74eb1 View commit details
    Browse the repository at this point in the history
  12. Configuration menu
    Copy the full SHA
    9991ab5 View commit details
    Browse the repository at this point in the history

Commits on Sep 24, 2024

  1. Configuration menu
    Copy the full SHA
    92e234f View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    369cbdc View commit details
    Browse the repository at this point in the history

Commits on Sep 27, 2024

  1. Configuration menu
    Copy the full SHA
    6782a8c View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    7d454e8 View commit details
    Browse the repository at this point in the history

Commits on Oct 4, 2024

  1. jump_psexec and jump_wmi updates

    new build mode for Service
    its-a-feature committed Oct 4, 2024
    Configuration menu
    Copy the full SHA
    e50ff56 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    181a539 View commit details
    Browse the repository at this point in the history
  3. Configuration menu
    Copy the full SHA
    59ab593 View commit details
    Browse the repository at this point in the history
  4. Configuration menu
    Copy the full SHA
    d3e58d6 View commit details
    Browse the repository at this point in the history

Commits on Oct 16, 2024

  1. Configuration menu
    Copy the full SHA
    2a4eee8 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    65a6f5c View commit details
    Browse the repository at this point in the history

Commits on Oct 17, 2024

  1. Configuration menu
    Copy the full SHA
    27ef374 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    05896c9 View commit details
    Browse the repository at this point in the history