Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Henry Foster
committed
Aug 3, 2018
1 parent
0b2c9e0
commit af90159
Showing
6 changed files
with
56 additions
and
9 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,44 @@ | ||
======================= | ||
Encoding External Files | ||
======================= | ||
|
||
CALDERA uses a simple encoding scheme to disguise some of the external | ||
scripts and tools used by the project. This can be useful in preventing | ||
AV software from interfering with the operation | ||
of the CALDERA server. | ||
|
||
|
||
Using the script editor | ||
----------------------- | ||
|
||
Small changes to external scripts can be made via the | ||
CALDERA web application via the built-in Script Editor. | ||
|
||
Manually with encode.py | ||
----------------------- | ||
|
||
For larger changes and encoding binary files ``scripts/encode.py`` can be | ||
used. This script will read in a file specified with the ``-i`` option | ||
and output an encoded file to a path specified with the ``-o`` option. | ||
|
||
|
||
Example | ||
^^^^^^^ | ||
|
||
The following series of commands are an example of downloading and encoding | ||
a new version of powerview using the ``encode.py`` script. | ||
|
||
.. code-block:: bash | ||
cd scripts/ | ||
# Download a version of powerview from Empire's dev branch | ||
curl -L -o powerview.ps1 https://github.com/EmpireProject/Empire/raw/dev/data/module_source/situational_awareness/network/powerview.ps1 | ||
# Encode the powershell script | ||
python encode.py -i powerview.ps1 -o powerview-ps1 | ||
mv powervew-ps1 ../caldera/files | ||
# remove the downloaded file | ||
rm powerview.ps1 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -3,4 +3,5 @@ Techniques | |
========== | ||
|
||
.. automodule:: caldera.app.operation.operation_steps | ||
:members: | ||
:members: | ||
|