{
	"id": "9a32b6c8-e026-4318-baac-577dc62f8ddf",
	"created_at": "2026-04-06T00:06:26.607266Z",
	"updated_at": "2026-04-10T03:21:44.086011Z",
	"deleted_at": null,
	"sha1_hash": "d0659abef77b901b7fa6b6dcb756e4618aa3e4df",
	"title": "GitHub - EmpireProject/Empire: Empire is a PowerShell and Python post-exploitation agent.",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 49501,
	"plain_text": "GitHub - EmpireProject/Empire: Empire is a PowerShell and\r\nPython post-exploitation agent.\r\nBy xorrior\r\nArchived: 2026-04-05 20:57:05 UTC\r\nThis project is no longer supported\r\nEmpire is a post-exploitation framework that includes a pure-PowerShell2.0 Windows agent, and a pure Python\r\n2.6/2.7 Linux/OS X agent. It is the merge of the previous PowerShell Empire and Python EmPyre projects. The\r\nframework offers cryptologically-secure communications and a flexible architecture. On the PowerShell side,\r\nEmpire implements the ability to run PowerShell agents without needing powershell.exe, rapidly deployable post-exploitation modules ranging from key loggers to Mimikatz, and adaptable communications to evade network\r\ndetection, all wrapped up in a usability-focused framework. PowerShell Empire premiered at BSidesLV in 2015\r\nand Python EmPyre premeiered at HackMiami 2016.\r\nEmpire relies heavily on the work from several other projects for its underlying functionality. We have tried to call\r\nout a few of those people we've interacted with heavily here and have included author/reference link information\r\nin the source of each Empire module as appropriate. If we have failed to improperly cite existing or prior work,\r\nplease let us know.\r\nEmpire is developed by @harmj0y, @sixdub, @enigma0x3, rvrsh3ll, @killswitch_gui, and @xorrior.\r\nFeel free to join us on Slack! https://bloodhoundgang.herokuapp.com\r\nInstall\r\nTo install, run sudo ./setup/install.sh script or use the corresponding docker image docker pull\r\nempireproject/empire .\r\nThere's also a quickstart here and full documentation here.\r\nQuickstart\r\nCheck out the Empire wiki for instructions on getting started with Empire.\r\nContribution Rules\r\nContributions are more than welcome! The more people who contribute to the project the better Empire will be for\r\neveryone. Below are a few guidelines for submitting contributions.\r\nBeginning with version 2.4, we will only troubleshoot issues for Kali, Debian, or Ubuntu. All other\r\noperating systems will not be supported. We understand that this is frustrating but hopefully the new\r\nhttps://github.com/PowerShellEmpire/Empire\r\nPage 1 of 2\n\ndocker build can provide an alternative.\r\nSubmit pull requests to the dev branch. After testing, changes will be merged to master.\r\nDepending on what you're working on, base your module on ./lib/modules/powershell_template.py or\r\n./lib/modules/python_template.py. Note that for some modules you may need to massage the output to get\r\nit into a nicely displayable text format with Out-String.\r\nCite previous work in the 'Comments' module section.\r\nIf your script.ps1 logic is large, may be reused by multiple modules, or is updated often, consider\r\nimplementing the logic in the appropriate data/module_source/* directory and pulling the script contents\r\ninto the module on tasking.\r\nUse approved PowerShell verbs for any functions.\r\nPowerShell Version 2 compatibility is STRONGLY preferred.\r\nTEST YOUR MODULE! Be sure to run it from an Empire agent before submitting a pull to ensure\r\neverything is working correctly.\r\nFor additional guidelines for your PowerShell code itself, check out the PowerSploit style guide.\r\nSource: https://github.com/PowerShellEmpire/Empire\r\nhttps://github.com/PowerShellEmpire/Empire\r\nPage 2 of 2",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"MITRE"
	],
	"references": [
		"https://github.com/PowerShellEmpire/Empire"
	],
	"report_names": [
		"Empire"
	],
	"threat_actors": [],
	"ts_created_at": 1775433986,
	"ts_updated_at": 1775791304,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/d0659abef77b901b7fa6b6dcb756e4618aa3e4df.pdf",
		"text": "https://archive.orkl.eu/d0659abef77b901b7fa6b6dcb756e4618aa3e4df.txt",
		"img": "https://archive.orkl.eu/d0659abef77b901b7fa6b6dcb756e4618aa3e4df.jpg"
	}
}