A Year in the Empire

Presented at DerbyCon 6.0 Recharge (2016), Sept. 23, 2016, 3 p.m. (50 minutes).

PowerShell is an ideal platform for building a new class of offensive toolsets and parties on both sides of the red and blue divide have begun to take notice. Driving some of this newfound awareness is the Empire project - a pure PowerShell post-exploitation agent that packages together the wealth of new and existing offensive PowerShell tech into a single weaponized framework. Since its release a year ago, the Empire project has garnered dozens of additional modules from the offensive community in addition to signatures and mitigations on the defensive side. This presentation will take you through the design considerations for Empire, the community contributions, its enhanced capabilities, its redesigned C2 system, and the new RESTful API. Welcome to the Empire.

Presenters:

• Will Schroeder / @harmj0y   as Will Schroeder
• Matt Nelson

Similar Presentations:

• BSidesLV 2015 / Building an Empire with PowerShell
• ekoparty 14 (2018) / Post-Explotation Art: Powershell Empire and Many Others
• DEF CON 30 (2022) / Empire 4.0 and Beyond Demo