‫The first question, what is PowerShell?
‫To give you a better understanding of PowerShell, we should first define what a show is in computer
‫science.
‫A show is a user interface that gives you access to various services of an operating system.
‫A shell can be command line based, or it can include a graphical user interface or UI.
‫Windows PowerShell is a shell developed by Microsoft.
‫Purposes of task automation and configuration management.
‫This powerful shell is based on the dot net framework, and it includes a command line shell and a scripting
‫language.
‫Why PowerShell?
‫PowerShell is a very powerful tool that offers tremendous benefit for querying systems and executing
‫commands, including on remote machines.
‫However, it's easily used for malicious purposes because it falls under the radar of traditional endpoint
‫security products.
‫PowerShell gives the bad guys a lot of power because it's part of the native Windows operating system,
‫which makes it difficult for security teams.
‫What is Empire project?
‫With their own words, Empire is a pure power shell post exploitation agent built on crypto, logically
‫secure communications and a flexible architecture empire implements the ability to run PowerShell agents
‫without needing PowerShell, not exact, rapidly deployable post exploitation modules ranging from the
‫keyloggers to mimic cats and adaptable communications to evade network detection, all wrapped up in
‫a usability focused framework.
‫Since the Empire project is not embedded into Kallie, we need to download and install it.
‫PowerShell Empire becomes the official site of the team who created the Empire project.
‫It's a very handy website full of documents and demos.
‫However, as of this video capturing it's in its early days of 2018, the documents need to be updated
‫according to the latest version of Empire Project.
‫The link at the bottom of the home page, Get Empire brings you to the GitHub page of Empire project.
‫I recommend you read the read me section of the page for details.
‫From the clone or download buttons at the upper right.
‫Copy the URL to clone the project.
‫Opened the terminal window, right Git Clone Paste the URL and hit enter.
‫Now, the files of the Empire project are being downloaded to our local when the download finishes go
‫to the set of Folder under the Project Folder Empire using CD Linux Command Run Dogs Install Dot S.H..
‫The project had all the required packages are being installed in this moment.
‫Be patient.
‫It could take a few minutes.
‫Now it asks for a password to negotiate with the server.
‫You can enter a password or if you hit enter directly, will generate a random password for you.
‫As soon as you hit enter, the setup is complete.
‫Now use the CD Linux Command to go back to the Project Home folder.
‫And Typekit slash empire to start the tool.
‫Welcome to the Empire.