Skip to content

Instantly share code, notes, and snippets.

Show Gist options
  • Save jeffmcjunkin/6ca39fae82c38a90a05902368118c881 to your computer and use it in GitHub Desktop.
Save jeffmcjunkin/6ca39fae82c38a90a05902368118c881 to your computer and use it in GitHub Desktop.
Empire REST response for `curl --insecure -i https://localhost:1337/api/agents?token=$TOKEN`
{
"agents": [
{
"ID": 1,
"checkin_time": "2017-05-15 16:17:21",
"children": null,
"delay": 5,
"external_ip": "172.16.187.135",
"functions": null,
"headers": "",
"high_integrity": 0,
"hostname": "TMP-MERCUTIO",
"internal_ip": "172.16.187.135",
"jitter": 0.0,
"kill_date": "",
"lastseen_time": "2017-05-15 16:23:45",
"listener": "http://172.16.187.1/",
"lost_limit": 60,
"name": "2HAN3CNU3H2HFAWC",
"old_uris": null,
"os_details": "Microsoft Windows 8.1 Enterprise Evaluation",
"parent": null,
"process_id": "5200",
"process_name": "powershell",
"ps_version": "4",
"results": null,
"servers": null,
"sessionID": "2HAN3CNU3H2HFAWC",
"session_key": "`4?M%ZxqNQSE0ClHR<pv~;m>X2j@wPO5",
"taskings": null,
"uris": "/admin/get.php,/news.asp,/login/process.jsp",
"user_agent": "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko",
"username": "TMP-MERCUTIO\\IEUser",
"working_hours": ""
}
]
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment