Cracken + Empire
Once it ships, Cracken will drive Empire's post-exploitation modules across its PowerShell, C#, IronPython, and Go agents as stages of a validated intrusion. Every action will stay under the same approval gates.
Connecting Empire
- Connect with
No credentials — runs on your own Tentacle
- Cadence
Not running yet
- Requires
The C2 Tools entitlement, which only unlocks the (empty) C2 tab in the Integration Center — no connector ships yet
What Cracken gets from Empire
Cracken reads nothing from Empire until its connector ships.
What Empire does not do
Nothing yet — Empire is catalogued only: the card shows a Coming soon badge and "Not available yet", and offers no Install or Configure action. No connector reads Empire agents, modules or their output, so nothing lands in the Knowledge base.
How Cracken uses Empire
- 01
Connect your Empire server
- 02
Stage the intrusion
- 03
Run under approval gates
Frequently asked questions
What does Cracken use Empire for?
Cracken will run Empire's post-exploitation modules on its PowerShell, C#, IronPython, and Go agents as ordered stages of one operation, under approval gates.
Do I keep control of the Empire C2 server?
Yes; Cracken will task an Empire server you host and configure, so its listeners, malleable HTTP profiles, and infrastructure stay yours.
More integrations
Brute Ratel
When it ships, Cracken will drive Brute Ratel's Badger implants across an operation.
Cobalt Strike
When it ships, Cracken will drive Cobalt Strike's Beacon from your team server.
Covenant
When it ships, Cracken will drive Covenant's in-memory Grunts across an operation.