PowerShell Empire

PowerShell/Python post-exploitation C2.

KaliParrothigh

pkg: powershell-empire

Empire is a command-and-control framework with PowerShell and Python agents, modules and listeners for red teams.

Syntax

powershell-empire server ; powershell-empire client

Example

powershell-empire client

Create a listener and stager, then manage agents that call back.

Advantages
  • Mature C2 with many modules
  • PowerShell + Python agents
Disadvantages
  • Heavily AV/EDR-flagged
  • Strict authorization required
Tags
#c2#post-ex#red-team

Official docs: Empire

Related commands

Frequently asked questions

What is PowerShell Empire used for?
Empire is a command-and-control framework with PowerShell and Python agents, modules and listeners for red teams.
What is an example PowerShell Empire command?
A common example is: powershell-empire client — Create a listener and stager, then manage agents that call back.
Is PowerShell Empire part of Kali Linux?
Yes. PowerShell Empire ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install powershell-empire.
What category of security tool is PowerShell Empire?
PowerShell Empire is a Exploitation tool with a high-risk profile when run against a live target.

Try recon tools live

Run real scans against a domain you control, stage by stage.

Open the lab →