Skip to content

Commit f79f024

Browse files
author
Etienne Stalmans
committed
Updates before creating Fork + PR to Empire
1 parent eafea97 commit f79f024

File tree

3 files changed

+9
-7
lines changed

3 files changed

+9
-7
lines changed

README.md

+7-5
Original file line numberDiff line numberDiff line change
@@ -9,13 +9,13 @@ A full-end-to-end example is available on [YouTube] and an outline can be found
99

1010
# Getting the Code
1111

12-
Liniaal depends heavily on the libraries created by [Ruler]. To interface with Powershell [Empire] you will require the 2.0_dev branch.
12+
Liniaal depends heavily on the libraries created by [Ruler]. To interface with Powershell [Empire] you will require version 2.0.
1313

1414
Dependencies:
1515

1616
* [Ruler]
1717
* [golang.org/x/crypto/ssh/terminal]
18-
* [Empire] version 2.0_dev
18+
* [Empire] version 2.0
1919

2020
The simpliest way to get Liniaal is to use `go get`:
2121

@@ -50,7 +50,7 @@ Compiled binaries for Linux, OSX and Windows are available. Find these in [Relea
5050
Firstly copy the [stager] and [listener] to the relevant directories within Empire.
5151

5252
```
53-
cp empire/data/stagers/http_mapi.ps1 /opt/empire/data/stagers/
53+
cp empire/agent/data/stagers/http_mapi.ps1 /opt/empire/data/agent/stagers/
5454
cp empire/lib/listeners/http_mapi.py /opt/empire/lib/listeners/
5555
```
5656

@@ -63,8 +63,10 @@ To setup the listener within Empire:
6363
(Empire: listeners) > uselistener http_mapi
6464
```
6565

66-
The only new option is **Folder** which allows you to specify a name for the hidden folder used for communication. The default folder name is **Liniaal**.
67-
Change this if you wish and then execute the listener.
66+
There are two new options **Folder** and **EmailAddress**, of which only **Folder** is mandatory. **Folder** allows you to specify a name for the hidden folder used for communication. The default folder name is **Liniaal**.
67+
The **EmailAddress** is used to provide an email address for Liniaal to use on the client-side. This may be required in instances where users have multiple mailboxes. If this is set, the agent will locate the correct mailbox and use that for communication. If **EmailAddress** is left blank, the agent will use the primary mailbox. This should be sufficient in most cases and provides you with a generic listener, which can be used with multiple targets.
68+
69+
Change these to a custom values if you wish and then execute the listener.
6870

6971
```
7072
(Empire: listeners/http_mapi) > set Folder Liniaal

empire/lib/listeners/http_mapi.py

+2-2
Original file line numberDiff line numberDiff line change
@@ -24,11 +24,11 @@ def __init__(self, mainMenu, params=[]):
2424

2525
'Author': ['@harmj0y','@_staaldraad'],
2626

27-
'Description': ('Starts a http[s] listener (PowerShell or Python) which can be used with Mailpire for C2 through Exchange'),
27+
'Description': ('Starts a http[s] listener (PowerShell) which can be used with Liniaal for C2 through Exchange'),
2828

2929
'Category' : ('client_server'),
3030

31-
'Comments': []
31+
'Comments': ['This requires the Liniaal agent to translate messages from MAPI to HTTP. More info: https://github.com/sensepost/liniaal']
3232
}
3333

3434
# any options needed by the stager, settable during runtime

0 commit comments

Comments
 (0)