Empire

Description

Empire (maintained by BC Security) is a post-exploitation and adversary emulation framework built on PowerShell and Python agents. It provides cryptologically secure communications, a flexible architecture with modules for privilege escalation, credential harvesting, lateral movement, and data exfiltration, all without needing native binaries on target systems.

Use Cases

• PowerShell-based post-exploitation on Windows targets
• Living-off-the-land adversary emulation
• Credential harvesting and lateral movement automation

Attack Phases

MITRE ATT&CK Techniques (3)