< Back

Get-EmpireStager

Sat Jan 18, 2020 8:47 pm

NAME Get-EmpireStager



SYNOPSIS

Get information on available stagers on a Empire server.





SYNTAX

Get-EmpireStager [-Id] <Int32> [-NoSSLCheck] [-StagerName <String>] [<CommonParameters>]



Get-EmpireStager [-Token] <String> [-ComputerName] <String> [[-Port] <Int32>] [-NoSSLCheck] [-StagerName <String>]

[<CommonParameters>]





DESCRIPTION

Get information on available stagers on a Empire server.





PARAMETERS

-Id <Int32>

Empire session Id of the session to use.



Required? true

Position? 1

Default value 0

Accept pipeline input? true (ByPropertyName)

Accept wildcard characters? false



-Token <String>

Empire API token to use to execute the action.



Required? true

Position? 1

Default value

Accept pipeline input? true (ByPropertyName)

Accept wildcard characters? false



-ComputerName <String>

IP Address or FQDN of remote Empire server.



Required? true

Position? 2

Default value

Accept pipeline input? true (ByPropertyName)

Accept wildcard characters? false



-Port <Int32>

Port number to use in the connection to the remote Empire server.



Required? false

Position? 3

Default value 1337

Accept pipeline input? true (ByPropertyName)

Accept wildcard characters? false



-NoSSLCheck [<SwitchParameter>]

Do not check if the TLS/SSL certificate of the Empire is valid.



Required? false

Position? named

Default value False

Accept pipeline input? false

Accept wildcard characters? false



-StagerName <String>

Name of the stager type to get information on. (Launcher, HTA, Launcher_Bat,

Launcher_VBS, PTH_WMIS, Macro, WAR, Stager, DLL, Ducky, HOP_PHP)



Required? false

Position? named

Default value

Accept pipeline input? false

Accept wildcard characters? false



<CommonParameters>

This cmdlet supports the common parameters: Verbose, Debug,

ErrorAction, ErrorVariable, WarningAction, WarningVariable,

OutBuffer, PipelineVariable, and OutVariable. For more information, see

about_CommonParameters (https:/go.microsoft.com/fwlink/?LinkID=113216).



INPUTS



OUTPUTS

System.Int32





NOTES





Licensed under BSD 3-Clause license



-------------------------- EXAMPLE 1 --------------------------



C:\\PS>Get-EmpireStager -Id 0



List all stagers and their information on the specified Empire server.









-------------------------- EXAMPLE 2 --------------------------



C:\\PS>Get-EmpireStager -Id 0 -StagerName launcher



Get information for the launcher stager on the specified Empire server.











RELATED LINKS