BC Security

Tonight at 1615 CST is Code & Cask. Tune in for some Empire 6 demos and impacket plugin development with Coin and Hubble.

https://www.twitch.tv/bcsecurity

Come hang out with the team at !

Besides having a library of prebuild modules, did you know that Empire also allows you to execute your own assemblies?

🚀 Massive Update to Empire Ops! 🚀

We've been hard at work making sure this course keeps you at the top of your game.

Here's what's new:
🔹9 new flags to capture in our Evil Corp-themed CTF Challenge!
🔹2 new exploitable boxes
🔹3 new exercises added

But that's not all! We've also:
🛠️ Updated the BOF section
🐧 Added new Linux exploitation exercises, including how to compromise endpoint devices through command injection
🏴‍☠️ Added a detailed walkthrough on how to Bring Your Own Empire Stager with Metasploit
🔑 Lifetime access to all content is included!

Already purchased? Simply grab some additional range time to try out the new exercises and CTF challenges.

Empire Operations 1 Empire Operations I is an introductory hands-on course with the Empire Post Exploitation Framework. In this course, students will learn the basics of using and operating Empire while being introduced to core red team principles and workflows.

Join us at on October 26th to explore the inner workings of IronPython and what makes it such an effective tool for attackers in our hands on lab, Snakes On Screen: Taming Offensive IronPython Techniques

Snakes on a Screen: Taming Offensive IronPython Techniques | HackRedCon Jake "Hubble" Krasnov is the Red Team Operations Lead and Chief Executive Officer of BC Security. He has spent the first half of his career as an Astronautical Engineer overseeing rocket modifications for the Air Force. He then moved into offensive security, running operational cyber testing for fig...

Love whiskey and programming? Join Coin tomorrow at 1630 EST while he fixes the bugs in go-clr and complains about how annoying it was to write the GoLang Empire agent.

https://www.twitch.tv/bcsecurity

Thank you to everyone who made Defcon great this year, and thank you Red Team Village for letting us submit a CTF! If you missed out on us or our CTF, head to our GitHub page and see what we've been up to.

GitHub - BC-SECURITY/Red-Team-Village-CTF-2024 Contribute to BC-SECURITY/Red-Team-Village-CTF-2024 development by creating an account on GitHub.

Empire has come a long way since its humble beginnings. If you haven't used it in some time, take a look at how it's grown into a multi-language powerhouse. For our dedicated users check out the post for exciting news about the upcoming release!

Not Your Grandfather’s Empire – BC Security todayOctober 10, 2024 Offensive Security Tools Cx01N Not Your Grandfather’s Empire Not Your Grandfather’s Empire I’ve wanted to put this blog together since returning home from DEFCON. Anytime we ran into someone who recognized our swag, they mentioned how much they loved Empire back in the da...

We are adding the autorun dashboard in Empire 6.0! Also, did you know IronPython agents can run PowerShell, .NET assemblies, and Python code?

GitHub: https://github.com/BC-SECURITY/Empire

Elevate your red teaming skills with our comprehensive Sliver C2 workshop! Designed for beginners to intermediate operators, this session covers essential techniques and delves into common threat actor methodologies. Enhance your offensive security toolkit today

Sliver Operations: Introduction to Command and Control This hands on course is an intro to the world of red teaming and offensive operations through the exploration of the Sliver Framework.

Empire 6.0 Friday Update
- Plugin Marketplace development is coming along and should have a preview out soon
- Go agent core functionality built for HTTP listener
- Complier and templates added to teamserver
- Added force install option if root

GitHub - BC-SECURITY/Empire: Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Pe*******on Testers. Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Pe*******on Testers. - BC-SECURITY/Empire

Empire v5.11.4 was just released with updates and bug fixes!
- Updated Rubeus to v2.3.2
- Added nameserver check for linux hosts
- Fixed Rubeus only using first arg
- Fixed Rubeus killing agent when using System.Environment.Exit
- And more

GitHub - BC-SECURITY/Empire: Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Pe*******on Testers. Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Pe*******on Testers. - BC-SECURITY/Empire

Happy Friday! What is happening with Empire this week?
We are soon releasing bug fixes to v5.11 to address some cases where background tasks do not update properly. Our team is also well on its way to releasing a formal closed-testing version of v6.0. Here is a preview of what we have done.

Live - v5.11
- Fix background tasks from continuous updates

Alpha - v6.0
- Go agent integrated with taskings
- Dynamic menu options for modules
- Initial design for plugin marketplace
- Converted C # server from plugin to core

GitHub - BC-SECURITY/Empire: Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Pe*******on Testers. Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Pe*******on Testers. - BC-SECURITY/Empire

Now that the team is back from Black Hat Events and DEFCON Hacking Conference, we can focus on getting Empire 6.0 ready for early access. One of the new features coming is dynamic options.

Goodbye DEFCON Hacking Conference! See you again next year.

Amazing party put on by Red Team Village! Glad to be able to support the village and meet some talented hackers last night.

Come find us at Black Hat Events, we are giving away coins and Empire Operations vouchers!

Check the 3rd floor for swag.

Let’s get hacking at Black Hat Events!

Want to get your hands on limited-release Empire coins? Follow us throughout the week at and for a chance to grab one.

Our recent post on ScriptBlock Smuggling got you curious about evasion techniques? Come learn the ins and outs of obfuscating your code, unhooking APIs, and more in our Advanced Threat Emulation: Evasion course at . Hubbl3 may even provide some unpublished TTPs.

There's still time to sign up for our Ops II course this Wednesday! Don't miss out on a chance to upgrade your skills as an Operator. We'll cover multi-server management, Empire customization, and more

Empire Ops 2 Empire Operations II is an intermediate-level course that is entirely hands-on with the Empire Post Exploitation Framework.

If you weren't able to make it to Hack Miami for our Beginner's Guide to Obfuscation workshop, we have published the updated materials on our GitHub!

GitHub - BC-SECURITY/Beginners-Guide-to-Obfuscation Contribute to BC-SECURITY/Beginners-Guide-to-Obfuscation development by creating an account on GitHub.