Home/Powershell Empire 101

Powershell Empire 101

This Blog is your initial guide to start the PowerShell Empire C2 framework.I wrote it when I was just starting to explore red teaming and offensive security tooling, so some pars are vague a bit :)

01

Downloading and setting up Powershell empire

In this section, you'll learn how to download, install, and configure PowerShell Empire on a Linux machine, both via the command-line interface (CLI) and optionally through the Starkiller GUI, Empire’

02

Listeners

listeners serve as the communication endpoints that await connections from compromised hosts (referred to as agents). They are an essential component of the command-and-control (C2) infrastructure, en

03

stagers

A stager in PowerShell Empire is a lightweight initial payload whose primary job is to retrieve and execute the full agent from the command and control (C2) server. It is the first stage of infection,

04

Agents in PowerShell Empire

An agent in PowerShell Empire is the persistent post-exploitation implant that runs on the compromised system after a successful stager has executed. It acts as the primary communication interface bet

05

credentials

The "Credentials" tab in Starkiller is a centralized place where Empire stores and displays all credentials harvested during an operation. Whether you dump passwords from memory, extract them from a b

06

Downloads

DownloadsThe Downloads tab in Starkiller is where you keep track of every file you've pulled from a compromised system. Any time you run a module that d

07

plugin

Plugins in Empire are backend Python scripts designed to extend functionality, automate complex tasks, or integrate with other tools. They’re not just nice-to-haves — they’re mission accelerators.