Skip to content

mitre/stockpile

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

MITRE Caldera plugin: Stockpile

A plugin supplying Caldera with TTPs and adversary profiles.

Read the full docs

For collection and exfiltration abilities added January 2022 (see list below), additional information for configuring these abilities can be found in the examples in the stockpile/docs/ folder.

2022 Included abilities:

  • Advanced File Search and Stager
  • Find Git Repositories & Compress Git Repository
  • Compress Staged Directory (Password Protected)
  • Compress Staged Directory (Password Protected) and Break Into Smaller Files
  • Exfil Compressed Archive to FTP
  • Exfil Compressed Archive to Dropbox
  • Exfil Compressed Archive to GitHub Repositories | Gists
  • Exfil Compressed Archive to GitHub Gist
  • Exfil Directory Files to Github (this exfiltrates files without archiving)
  • Exfil Compressed Archive to S3 via AWS CLI
  • Transfer Compressed Archive to Separate S3 Bucket via AWS CLI
  • Scheduled Exfiltration

Potential Issues

  • The donut-shellcode python package is not currently supported for ARM chip architectures. Thus the package cannot be installed on newer Mac systems with the M chip series.