Coder Social home page Coder Social logo

bc-security / starkiller Goto Github PK

View Code? Open in Web Editor NEW
1.3K 36.0 190.0 15.63 MB

Starkiller is a Frontend for PowerShell Empire.

Home Page: https://www.bc-security.org/post/an-introduction-to-starkiller

License: MIT License

JavaScript 12.68% HTML 0.29% Vue 86.97% SCSS 0.05%
empire c2 redteam-infrastructure hacktoberfest

starkiller's Introduction

Donate Docs Twitter URL YouTube URL Discord Donate Blog Twitter URL Twitter URL YouTube URL Mastodon Follow Mastodon Follow Threads Threads LinkedIn

Starkiller

Starkiller is a Frontend for Powershell Empire. It is a web application written in VueJS. If you'd like to contribute please follow the Contribution guide. If you'd like to request a feature or report a bug, please follow the Issue template.

Getting Started

As of Empire 5.0 and Starkiller 2.0, you no longer need to install Starkiller or build it from source. It is prepackaged in Empire as a submodule and served via Empire's API.

Sponsorship and extra features

Sponsoring at the Individual level will give access to extra features. At the moment, the extra Starkiller sponsorship features include:

Dashboard

Graph View

Process Browser

Modify Module Scripts

Enable/Disable modules

Proxy Management

There is also a collection of Empire plugins available via sponsorship.

Thanks to our sponsors the following features which started as sponsor features have been moved to the public and kali builds.

  • File browser
  • Popout windows
  • Chat widget
  • Bypass management
  • Malleable profile management

Build and run from source

Prerequisites:

  • Node.js 16+.
  • Yarn Currently it has been tested using Yarn 1.22.
yarn

Compile and hot-reload for development

yarn dev

Compile and minify for production

yarn build

Compatability Table

Note: As of Empire 5.0 and Starkiller 2.0, this compatability table is less relevant. Starkiller is now packaged in Empire as a git submodule and does not need to be installed separately.

Starkiller’s new features occasionally depend on new functionality within Empire. Therefore, it is recommended that you follow this release table for syncing up your Starkiller and Empire versions. If you are using an older version of Empire, Starkiller will warn you when logging in, but will allow you to continue. If a there is a new minimum version of Empire required to get all the features out of Starkiller, we will do a minor version bump to Starkiller.

Starkiller Release Minimum Empire Version Notes
1.0.x 3.1.1 3.1.1 is the first version of Empire to include all the user endpoints necessary for Starkiller to function
1.1.x 3.1.5 3.1.5 updated the reporting endpoint to have the same result as running it in the CLI. Starkiller 1.1.x uses that reporting endpoint for the reporting tab
1.2.x 3.2.0 3.2.0 added an endpoint for users that is needed for the UI updates introduced in Starkiller 1.2.0
1.3.x 3.3.0 3.3.0 categorized all of the modules in Empire with corresponding MITRE techniques
1.4.x, 1.5.x 3.5.0 3.5.0 added real-time notifications for new listeners and agents
1.6.x, 1.7.x 3.7.0 1.6.0 was tested against Empire 3.7.0. There shouldn't be any breaking changes, but there were a lot of code changes.
1.8.x 4.0.0
1.9.x, 1.10.x, 1.11.x 4.1.0 The updated agent screen requires new endpoints in order to update fields on the 'view' tab
2.0.x, 2.1.x 5.0.0 Uses the new v2 api
2.2.x, 2.3.x 5.2.0 Requires the new plugin task endpoints
2.4.x 5.5.0 For sponsors, requires the checkin endpoints
2.5.x 5.6.0 Requires the tags endpoints
2.6.x 5.7.0 Requires the user avatar endpoints and fixes for the agent task socketio events

Changelog

Detailed changes for each release are documented in the changelog.

Stay In Touch

License

MIT

Copyright (c) 2021 BC Security

starkiller's People

Contributors

cx01n avatar dependabot[bot] avatar logicsec avatar vinnybod avatar web-flow avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

starkiller's Issues

[FEATURE REQUEST] Improvements in displaying info on StarKiller

Is your feature request related to a problem? Please describe.
Modules in Starkiller, although tagged to Mitre Attack ID, does not give enough information with regards to which operating systems they can be used for, what is the goal of that module with respect to Mitre TTP, what exact command/script is being run, ability to modify the command before running.

Describe the solution you'd like
A screen grab from Mitre Caldera (a post exploitation adversary emulation tool like Powershell Empire)

image

Describe alternatives you've considered
Mitre Caldera

Additional context
Nope

[BUG] Unable to create more than 1 'redirector' listener

Empire Version

  • Empire 3.5.1

Starkiller Version

  • Starkiller 1.4.0

OS Information (Linux flavor, Python version)

  • OS: Kali 2020.3
  • Python: 3.8.6

Describe the bug
I am unable to start more than one 'redirector' listener at one time. Prevents pivoting through more than a single end-target. When attempting to make an additional 'redirector' listener, Suspect this is similar to my previous ticket with Empire not being able to do the same thing: BC-SECURITY/Empire#386

To Reproduce
Steps to reproduce the behavior:

  1. Get an agent on a machine
  2. Setup a 'redirector' listener
  3. PSexec to another target, calling back to your 'redirector' listener
  4. Attempt to setup another 'redirector' listener on your new target box
    Error / failure condition should trigger when attempting to setup the new 'redirector' listener

Expected behavior
I should be able to set up additional 'redirector' listeners on subsequent targets to pivot more than 1 target deep in a network.

Screenshots
If applicable, add screenshots to help explain your problem.

Desktop (please complete the following information):

  • OS: [e.g. iOS]
  • Version [e.g. 22]

Additional context
Add any other context about the problem here.

[BUG] Error Failed to start listener http

Empire Version

  • Empire 3.8.2

Starkiller Version
-Starkiller 1.8.1-Kali

OS Information (Linux flavor, Python version)

  • OS: kali 2021.2
  • Python: 3.9.2

Describe the bug
While Creating a new listener, and choosing the type http, changing the IP and port, after submitting starkiller shows an error Failed to start listener http, and Empire shows [!] HTTPS selected but no CertPath specified. (But HTTP was selected).

To Reproduce
Steps to reproduce the behavior:

  1. Start Starkiller (starkiller --no-sandbox)
  2. Start the Empire (sudo ./empire --rest)
  3. Login with starkiller
  4. Create new listener
  5. choose the type "http"
  6. choose the ip and port
  7. submit
  8. See the error "Failed to start listener http"

Expected behavior
Expected to start a listener on the host

Screenshots
If applicable, add screenshots to help explain your problem.
https://i.imgur.com/JxAOaMp.png
https://i.imgur.com/77pE9z1.png

I have also tried 127.0.0.1 and other IPs and port, none of them worked, still the same error.

[BUG] Segmentation Fault

Empire Version

  • Empire 3.8.2

Starkiller Version
1.7

OS Information (Linux flavor, Python version)

  • OS: Kali 2020.4
  • Python: 3.9.2

Describe the bug

Empire and deathstar (I'm aware it's not yours but if you could help)

To Reproduce

I run the commands

powershell-empire --rest --username "username" --password "password"

deathstar --username "username" --password "password"

and both are working, but when I open starkiller both close automaticaly and do not run while starkiller is open

I have installed starkiller through

apt install starkiller

this is what I get on empire when I run starkiller

zsh: segmentation fault powershell-empire --rest --username empireadmin --password password123

and this is what I get on deathstar when I run starkiller

Traceback (most recent call last):
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpx/_exceptions.py", line 326, in map_exceptions
    yield
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpx/_client.py", line 1502, in _send_single_request
    (status_code, headers, stream, ext,) = await transport.arequest(
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpcore/_async/connection_pool.py", line 218, in arequest
    response = await connection.arequest(
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpcore/_async/connection.py", line 93, in arequest
    self.socket = await self._open_socket(timeout)
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpcore/_async/connection.py", line 119, in _open_socket
    return await self.backend.open_tcp_stream(
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpcore/_backends/auto.py", line 44, in open_tcp_stream
    return await self.backend.open_tcp_stream(
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpcore/_backends/asyncio.py", line 270, in open_tcp_stream
    return SocketStream(
  File "/usr/lib/python3.9/contextlib.py", line 135, in __exit__
    self.gen.throw(type, value, traceback)
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpcore/_exceptions.py", line 12, in map_exceptions
    raise to_exc(exc) from None
httpcore.ConnectError: [Errno 111] Connect call failed ('127.0.0.1', 1337)

The above exception was the direct cause of the following exception:

Traceback (most recent call last):
  File "/root/.local/bin/deathstar", line 8, in <module>
    sys.exit(run())
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/deathstar/deathstar.py", line 385, in run
    asyncio.run(main(args))
  File "/usr/lib/python3.9/asyncio/runners.py", line 44, in run
    return loop.run_until_complete(main)
  File "/usr/lib/python3.9/asyncio/base_events.py", line 642, in run_until_complete
    return future.result()
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/deathstar/deathstar.py", line 352, in main
    await deathstar.power_up()
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/deathstar/deathstar.py", line 334, in power_up
    await asyncio.gather(*[
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/deathstar/deathstar.py", line 273, in agent_spawner
    lambda c: c.credtype == "plaintext", await self.empire.credentials.get()
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/deathstar/empire.py", line 184, in get
    r = await self.client.get("creds")
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpx/_client.py", line 1548, in get
    return await self.request(
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpx/_client.py", line 1371, in request
    response = await self.send(
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpx/_client.py", line 1406, in send
    response = await self._send_handling_auth(
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpx/_client.py", line 1444, in _send_handling_auth
    response = await self._send_handling_redirects(
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpx/_client.py", line 1476, in _send_handling_redirects
    response = await self._send_single_request(request, timeout)
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpx/_client.py", line 1502, in _send_single_request
    (status_code, headers, stream, ext,) = await transport.arequest(
  File "/usr/lib/python3.9/contextlib.py", line 135, in __exit__
    self.gen.throw(type, value, traceback)
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpx/_exceptions.py", line 343, in map_exceptions
    raise mapped_exc(message, **kwargs) from exc  # type: ignore
httpx.ConnectError: [Errno 111] Connect call failed ('127.0.0.1', 1337)

Expected behavior

I was expecting to be able to access to the deathstar listener on starkiller

Screenshots
N/A

Desktop (please complete the following information):
N/A

Additional context
N/A

What can be the reason for these errors?

Thank you in advance

[BUG] Error 400 when creating new listener

Empire Version

  • Empire 3.1.2

Starkiller Version
1.0.0. Rebuilded it from source

OS Information (Linux flavor, Python version)

  • OS: Debian 10
  • Python: python3.7

Describe the bug
When we attempt to create a new listener that is not an http listener, we obtain 400 error. This is due to the file: src/api/listener-api.js.
We can see in the code that the function which handles the listener creation is createListener(). This function always requests the URI "/listeners/http".
However when we look at Empire's code we have the API endpoint to create a listener: "@app.route('/api/listeners/string:listener_type', methods=['POST'])". Therefore, the URI requested in Starkiller should have been something like "listeners/$type"

To Reproduce
Create a Listener that is not "http"

Expected behavior
Create the good listener

Screenshots
image
The screenshot show the 400 error when attempting to create a listeners.
The values displayed are some debug print used to find the problem.

Desktop (please complete the following information):

  • OS: [e.g. iOS]
  • Version [e.g. 22]

Additional context
The workaround is to create through CLI or directly with the API to create the listener
Best regards,

[QUESTION] How to connect by browser

Empire Version

  • Empire 3.x

Starkiller Version
Last one

Describe the question
I try to connect to Starkiller by web browser but I obtain an 401 Unauthorise error

Screenshots
image

**Desktop **

  • OS: KALI (Empire/Starkiller) + Windows (Web browser)

[FEATURE REQUEST] Add description/information on Modules tab

Is your feature request related to a problem? Please describe.
The current modules page does not all you to view the information about modules without going to an active agent.

Describe the solution you'd like
Add the module description/information to the modules page to match how 'execute module' displays the info.

Modules Tab:
image

Execute Modules:
image

Describe alternatives you've considered
The current implementation works, but it would definitely make it easier to use the modules page as a reference section.

Additional context
N/A

[BUG] Cannot see adding listener

Empire Version

  • Empire 3.2.3

Starkiller Version
1.2.3

OS Information (Linux flavor, Python version)

  • OS: Ubuntu 18.04
  • Python: Python3

Describe the bug
Starting Empire with --rest with specific password and username
Starting starkiller
loggin on Starkiller
Create a Listener, work but i can see it in the Starkiller.
This is the error in the dev mode of starkiller
image

To Reproduce
Steps to reproduce the behavior:

  1. Go to 'Empire folder 3.2.3 and start it as root with ./empire --rest --username admin --password 'Password123!''
  2. Start in other console as root starkiller './starkiller... --no-sandbox (i test with and without the option no change)'
  3. Log on Starkiller webui
  4. Create a Listener http and return in the Listener menu, i can't see any listener but in the console of the empire cli you can see the listener.

Expected behavior
See the listener running in the Starkiller menu

Screenshots
Accessing the Listener menu
image

Desktop (please complete the following information):

  • OS: Ubuntu
  • Version 18.04

Additional context
Offline VM

[FEATURE REQUEST] - Make it 100% offline

Is your feature request related to a problem? Please describe.
Yes, the GUI need some external source to work like google font

image

Describe the solution you'd like
Use only local font and link, don't depend on internet ressources

Describe alternatives you've considered

Additional context
I'm on 1.2.3 Ubuntu 18.04

[FEATURE REQUEST] Pop-out windows for agents

Is your feature request related to a problem? Please describe.
No

Describe the solution you'd like
It would be helpful to allow agents to pop-out from the main menu, so you can interact with multiple agents at once.

Describe alternatives you've considered
Tabs instead of pop-out windows is another option, but it may become a bit cluttered in the window.

Additional context
N/A

[FEATURE REQUEST] Vue 3 / Vuetify 3

Note: Please fill out all sections (if applicable) and do not delete the below section headers, otherwise the bot will close the issue.

Is your feature request related to a problem? Please describe.

A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]

Vue 2 is reaching End of Life on December 31st, 2023.

Describe the solution you'd like

A clear and concise description of what you want to happen.

We should migrate to Vue 3 (and Vuetify 3).

Describe alternatives you've considered

A clear and concise description of any alternative solutions or features you've considered.

None

Additional context

Add any other context or screenshots about the feature request here.

This could be done in pieces. There is a Vue 3 compatibility build to help the migration. I think Vuetify 2 being tied to Vue 2 and Vuetify 3 being tied to Vue 3 makes it a bit more difficult to be iterative about it.

STARKILLER - Color Code Modules Based on Privileges

Description

Running through the "Execute Module" field for a given Empire agent, it does not currently address which modules require elevated privileges without iteratively selecting a given module. I understand there is a pop-out that states "Error: module needs to run in an elevated context", but unless a user frequents a Empire, or uses that particular module frequently, you don't know unless you try and run the given module.

Solution

Simply suggest that modules that need to run in an elevated context be shown in a different color. That would assist in the quick identification of modules that need to be run as a privileged user.

Alternatives

I've considered the existing pop-up, but again, this pop-up only appears post selection of a given module.

Additional Context

No response

[FEATURE REQUEST] ARM version?

Is there an issue with running this on an ARM platform?
I notice that the kali apt install starkiller doesn’t work on an RasPi, since there doesn’t seem to be an ARM build.
Is that an oversight, or are there some technical issues that prevent this from running on ARM?

File Browser icon keeps circling and never finishes, and error in console

Empire Version

  • Empire-sponsor 4.1.0

Starkiller Version
starkiller-1.8.0.AppImage, and issue is also in starkiller-1.9.0-Sponsors.AppImage

OS Information (Linux flavor, Python version)

  • OS: Kali Linux 2021.2
  • Python: The version that's included in the Docker image.

Describe the bug

The "File Browser" never displays files, and I see an error in the console.

To Reproduce

Steps to reproduce the behavior:

  1. Interact with an agent.

  2. click on File Browser

  3. Notice that circling dots never complete and never shows files.

  4. See error in the console or Tasks: "[!] error running command: The term 'ConvertTo-Json' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again."

Expected behavior

I should see a list of files and directories.

Screenshots

If applicable, add screenshots to help explain your problem.

Desktop (please complete the following information):

  • OS: Kali 2021.2 virtual machine (VirtualBox)

  • Version 2021.2

Additional context

Empire server is running in a Docker container built from Empire-Sponsors "sponsors-master" branch.

git clone https://github.com/BC-SECURITY/Empire-Sponsors.git && cd Empire-Sponsors
sudo docker build -t empire-sponsor:4.1.0 .
sudo docker create -v /empire --name data empire-sponsor:4.1.0
sudo docker run -it --privileged --net=host --volumes-from data empire-sponsor:4.1.0

I'm able to create a listener and stager, and after running the stager on the Windows target system, I get an agent check-in. I can interact with the agent and run commands. When I click on File Browser, the dots circling never stop and I see the "ConvertTo-Json" error I included above.

[FEATURE REQUEST] Indicator of Elevated Process in Agents

Is your feature request related to a problem? Please describe.
No

Describe the solution you'd like
When an agent is displayed in the agents dash board it showed provide an indicator of whether or not it is running in a high integrity process.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.

[FEATURE REQUEST] Notification if file browser is not compatible

Is your feature request related to a problem? Please describe.
The file browser doesn't work in powershell 2 agents and does not give a response to the user.
#67

Describe the solution you'd like
Starkiller should give a notification or popup message on the file browser that it is not compatible with powershell 2 instances.

Describe alternatives you've considered
We can build a different way to do the file browser that does not rely on "convertto-json" but that doesn't seem practical.

Additional context
14bg

[FEATURE REQUEST] Web based frontend

Is your feature request related to a problem? Please describe.
It's awesome tools revive from dead :) . Could you please port it to web based front end as we have in old empire.

Describe the solution you'd like
A clear and concise description of what you want to happen.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.

[FEATURE REQUEST] Add list of completed and queued taskings

Is your feature request related to a problem? Please describe.
Currently, we can clear the queued taskings but are unable to see which one has been completed or queued.

Describe the solution you'd like
Adding an extra tab to the agent should solve this problem by displaying all taskings, who queued it, and the results. Highlighting tasking based on different information may be useful as well. Such as red - incomplete/failed task, yellow - queued.

image

Describe alternatives you've considered
Another location for this data may be applicable, but at the moment this location makes sense.

Additional context
Always open to other suggestions.

[BUG]

Empire Version

  • Empire 3.x

Starkiller Version
4.3.0
OS Information (Linux flavor, Python version)

  • OS: Kali LInux Rolling 2022.1
  • Python: 3.9

Describe the bug
Unable to kill listener

To Reproduce
Steps to reproduce the behavior:

  1. Go to the listener
  2. kill/disable
  3. error
    Capture

Empire Automatic Close

Empire Version

Empire 3.8.2
Starkiller Version
1.7

OS Information (Linux flavor, Python version)

OS: Kali 2020.4
Python: 3.9.2
Describe the bug

Empire and deathstar (I'm aware it's not yours but if you could help)

To Reproduce

I run the commands

powershell-empire --rest --username "username" --password "password"

deathstar --username "username" --password "password"

and both are working, but when I open starkiller both close automaticaly and do not run while starkiller is open

I have installed starkiller through

apt install starkiller

this is what I get on empire when I run starkiller

zsh: segmentation fault powershell-empire --rest --username empireadmin --password password123
and this is what I get on deathstar when I run starkiller

Traceback (most recent call last):
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpx/_exceptions.py", line 326, in map_exceptions
    yield
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpx/_client.py", line 1502, in _send_single_request
    (status_code, headers, stream, ext,) = await transport.arequest(
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpcore/_async/connection_pool.py", line 218, in arequest
    response = await connection.arequest(
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpcore/_async/connection.py", line 93, in arequest
    self.socket = await self._open_socket(timeout)
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpcore/_async/connection.py", line 119, in _open_socket
    return await self.backend.open_tcp_stream(
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpcore/_backends/auto.py", line 44, in open_tcp_stream
    return await self.backend.open_tcp_stream(
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpcore/_backends/asyncio.py", line 270, in open_tcp_stream
    return SocketStream(
  File "/usr/lib/python3.9/contextlib.py", line 135, in __exit__
    self.gen.throw(type, value, traceback)
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpcore/_exceptions.py", line 12, in map_exceptions
    raise to_exc(exc) from None
httpcore.ConnectError: [Errno 111] Connect call failed ('127.0.0.1', 1337)

The above exception was the direct cause of the following exception:

Traceback (most recent call last):
  File "/root/.local/bin/deathstar", line 8, in <module>
    sys.exit(run())
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/deathstar/deathstar.py", line 385, in run
    asyncio.run(main(args))
  File "/usr/lib/python3.9/asyncio/runners.py", line 44, in run
    return loop.run_until_complete(main)
  File "/usr/lib/python3.9/asyncio/base_events.py", line 642, in run_until_complete
    return future.result()
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/deathstar/deathstar.py", line 352, in main
    await deathstar.power_up()
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/deathstar/deathstar.py", line 334, in power_up
    await asyncio.gather(*[
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/deathstar/deathstar.py", line 273, in agent_spawner
    lambda c: c.credtype == "plaintext", await self.empire.credentials.get()
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/deathstar/empire.py", line 184, in get
    r = await self.client.get("creds")
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpx/_client.py", line 1548, in get
    return await self.request(
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpx/_client.py", line 1371, in request
    response = await self.send(
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpx/_client.py", line 1406, in send
    response = await self._send_handling_auth(
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpx/_client.py", line 1444, in _send_handling_auth
    response = await self._send_handling_redirects(
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpx/_client.py", line 1476, in _send_handling_redirects
    response = await self._send_single_request(request, timeout)
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpx/_client.py", line 1502, in _send_single_request
    (status_code, headers, stream, ext,) = await transport.arequest(
  File "/usr/lib/python3.9/contextlib.py", line 135, in __exit__
    self.gen.throw(type, value, traceback)
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpx/_exceptions.py", line 343, in map_exceptions
    raise mapped_exc(message, **kwargs) from exc  # type: ignore
httpx.ConnectError: [Errno 111] Connect call failed ('127.0.0.1', 1337)
Expected behavior

I was expecting to be able to access to the deathstar listener on starkiller

What can be the reason for these errors?

[BUG] QUESTION How to connect by browser

Empire Version

  • Empire 4.5.5

Starkiller Version
1.1.0

OS Information (Linux flavor, Python version)

  • OS: KALI (Starkiller/Empire) + Windows ( Web browser)
  • Python: 3.9

Describe the bug
I try to connect to Starkiller by web browser but I obtain an 401 Unauthorise error

To Reproduce
Steps to reproduce the behavior:

  1. Start Starkiller
  2. Connect to https://IP:1337
  3. Error 401 : Unauthorise

Expected behavior
Connexion page

Screenshots
image

Desktop (please complete the following information):

  • OS: KALI (Starkiller/Empire) + Windows ( Web browser)
  • Version 11

Additional context
none

[BUG]

Empire Version

  • 3.2.0 BC-Security Fork

Starkiller Version
1.2.0

OS Information (Linux flavor, Python version)

  • OS: Windows 10 Pro N
  • Python: Python 3.8.2

Describe the bug
The slider bar thingy's on agent console keeps disappearing and appearing.

To Reproduce
Steps to reproduce the behavior:

  1. Install Starkiller V1.2.0
  2. Create a listener
  3. Create a stager
  4. Run Stager on desired target.
  5. Click Target and you will see the slider bar thingy's disappearing and appearing

Expected behavior
Slider's should remain appeared

Screenshots
ezgif-6-62699c1196d5

Desktop (please complete the following information):

  • OS: [e.g. iOS] Windows 10 Pro N
  • Version [e.g. 22] 1909

Additional context
I like the application and i think you have done amazing work in the 2 months it's been here

[BUG] RunAs / SpawnAs / Credential Use failure

Empire Version

  • Empire 3.5.1

Starkiller Version
Starkiller 1.4.0

OS Information (Linux flavor, Python version)

  • OS: Kali 2020.3
  • Python: 3.8.6

Describe the bug
Suspected that ALL credential modules are truncating any passwords with a '$' in them. Confirmed to be an issue with runas/spawnas, but I suspect its for all credential use.

To Reproduce
Steps to reproduce the behavior:

  1. Get an agent on a machine
  2. Attempt to use the 'runas' or 'spawnas' module with credentials that has a '$' in it
  3. Cred use will fail

Expected behavior
Credentials should be able to be used successfully if a user has any special characters, specifically a $ sign in the password.

Screenshots
If applicable, add screenshots to help explain your problem.

Desktop (please complete the following information):

  • OS: [e.g. iOS]
  • Version [e.g. 22]

Additional context
Add any other context about the problem here.

[FEATURE REQUEST] starkiller on Kali ARM platforms available as package

Is your feature request related to a problem? Please describe.
starkiller can’t be installed on KALI running on an ARM platform, at least not with the recommended ‘apt install starkiller’ command

Describe the solution you'd like
I’d love to see feature parity between arm64 and amd64 Kali platforms.

Describe alternatives you've considered
none

Additional context
none

Dear Author help

Dear author
These is a 500 error when I use Starkiller in Windows
What's wrong?I have already launched empire --rest

[BUG] The sidebar scrolls, but it should stick to the side

Empire Version

  • Empire 3.x

Starkiller Version
1.1.0

OS Information (Linux flavor, Python version)

  • OS: All
  • Python: N/A

Describe the bug
A clear and concise description of what the bug is.

To Reproduce
Steps to reproduce the behavior:

  1. Go to a page with enough height to scroll such as the reporting list page
  2. Scroll down the page
  3. Observe that sidebar scrolls with the page

Expected behavior
I expect the sidebar to stick to the side and have the content scroll independently.

Screenshots
Screen Shot 2020-04-13 at 9 57 36 PM

Desktop (please complete the following information):

  • OS: Mac Catalina

Additional context

No starkiller in latest Kali

========================================================================================
[Version] 5.0.0-beta2 | [Web] https://github.com/BC-SECURITY/Empire
how to run starkiller gui?

no starkiller in zsh in kali , no plugins etc. Cant find any info about it
if i run apt install powershell-empire starkiller
it just says that powershell empire allready newest version. help plz )
nothing can found in docs ) https://bc-security.gitbook.io/empire-wiki/interfaces/starkiller

use starkiller client but there's a 500 error on empire restful api

Dear author
I use empire3.1.1 on my server
Using command "./empire --rest --username admin password admin" to create a teamserver
But when I use starkiller client on my windows(admin,admin) to connect to empire restful api
There is a 500 error on the empire restfulapi output,and there is no change on Starkiller's Initial interface(even no error,just stay in the initial stauts)
If you're available to help me, I will feel much honored

[FEATURE REQUEST] Check for updates from the application

Is your feature request related to a problem? Please describe.
When I need to install an update or even find out about an update for Starkiller, I have to go to GitHub, check the releases, and redownload it.

Describe the solution you'd like
I want to be able to "check for updates" and install those updates from Starkiller.

Describe alternatives you've considered
Just a popup that tells the user that there is a new version available with a link to GitHub.

Additional context

Starkiller error GPU

The latest version of kali, using the latest Starkiller error
The error message is shown in the figure::
image

Remote access to starkiller panel requirements

Im trying to make a multi c2 server for redteam,already done for mythic c2, know following same for starkiller but isnt working? Any requrements like a starkiller client for operator device?

[BUG] Empire Automatic Close

I'm running the last version of empire on kali

I run the commands

powershell-empire --rest --username "username" --password "password"

deathstar --username "username" --password "password"

and both are working, but when I open starkiller both close automaticaly and do not run while starkiller is open

I have installed starkiller through

apt install starkiller

this is what I get on empire when I run starkiller

zsh: segmentation fault powershell-empire --rest --username empireadmin --password password123

and this is what I get on deathstar when I run starkiller

Traceback (most recent call last):
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpx/_exceptions.py", line 326, in map_exceptions
    yield
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpx/_client.py", line 1502, in _send_single_request
    (status_code, headers, stream, ext,) = await transport.arequest(
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpcore/_async/connection_pool.py", line 218, in arequest
    response = await connection.arequest(
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpcore/_async/connection.py", line 93, in arequest
    self.socket = await self._open_socket(timeout)
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpcore/_async/connection.py", line 119, in _open_socket
    return await self.backend.open_tcp_stream(
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpcore/_backends/auto.py", line 44, in open_tcp_stream
    return await self.backend.open_tcp_stream(
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpcore/_backends/asyncio.py", line 270, in open_tcp_stream
    return SocketStream(
  File "/usr/lib/python3.9/contextlib.py", line 135, in __exit__
    self.gen.throw(type, value, traceback)
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpcore/_exceptions.py", line 12, in map_exceptions
    raise to_exc(exc) from None
httpcore.ConnectError: [Errno 111] Connect call failed ('127.0.0.1', 1337)

The above exception was the direct cause of the following exception:

Traceback (most recent call last):
  File "/root/.local/bin/deathstar", line 8, in <module>
    sys.exit(run())
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/deathstar/deathstar.py", line 385, in run
    asyncio.run(main(args))
  File "/usr/lib/python3.9/asyncio/runners.py", line 44, in run
    return loop.run_until_complete(main)
  File "/usr/lib/python3.9/asyncio/base_events.py", line 642, in run_until_complete
    return future.result()
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/deathstar/deathstar.py", line 352, in main
    await deathstar.power_up()
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/deathstar/deathstar.py", line 334, in power_up
    await asyncio.gather(*[
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/deathstar/deathstar.py", line 273, in agent_spawner
    lambda c: c.credtype == "plaintext", await self.empire.credentials.get()
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/deathstar/empire.py", line 184, in get
    r = await self.client.get("creds")
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpx/_client.py", line 1548, in get
    return await self.request(
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpx/_client.py", line 1371, in request
    response = await self.send(
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpx/_client.py", line 1406, in send
    response = await self._send_handling_auth(
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpx/_client.py", line 1444, in _send_handling_auth
    response = await self._send_handling_redirects(
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpx/_client.py", line 1476, in _send_handling_redirects
    response = await self._send_single_request(request, timeout)
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpx/_client.py", line 1502, in _send_single_request
    (status_code, headers, stream, ext,) = await transport.arequest(
  File "/usr/lib/python3.9/contextlib.py", line 135, in __exit__
    self.gen.throw(type, value, traceback)
  File "/root/.local/pipx/venvs/deathstar-empire/lib/python3.9/site-packages/httpx/_exceptions.py", line 343, in map_exceptions
    raise mapped_exc(message, **kwargs) from exc  # type: ignore
httpx.ConnectError: [Errno 111] Connect call failed ('127.0.0.1', 1337)

What can be the reason for these errors?

Thank you in advance

[FEATURE REQUEST]

I really just want support for parrot OS

( I know this is unhelpful )

I can use powershell empire on arch, ubuntu, and kali but I cannot use it on parrot which makes me have to look for alternatives here at the company I work for we use parrotOS

vue-cli-service electron:serve INFO Starting development server... 40% building 77/84 modules 7 active ...js??vue-loader-options!/home/user/Documents/tools/Starkiller/node_modules/eslint-loader/index.js??ref--13-0!/home/user/Documents/tools/Starkiller/src/components/StarkillerSnackbar.vuenode: ../src/coroutine.cc:134: void* find_thread_id_key(void*): Assertion `thread_id_key != 0x7777' failed.

Note: Please fill out all sections (if applicable) and do not delete the below section headers, otherwise the bot will close the issue.

Empire Version

  • Empire 3.x
    Latest

Starkiller Version

Latest, cloned from github

OS Information (Linux flavor, Python version)

  • OS: Kali Linux
  • Python: python3(I also have python2.7)

Describe the bug

A clear and concise description of what the bug is.
Something not compiling using yarn

To Reproduce

Steps to reproduce the behavior:
Clone https://github.com/BC-SECURITY/Starkiller repo
Then find a way to install nodejs 16x
Then follow the installation https://github.com/BC-SECURITY/Starkiller#build-and-run-from-source

Expected behavior

It should compile without erros

Screenshots

image

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.