BlackHat Arsenal 2021

Release Notes

• Refactored the namedpipe communication between the PurpleSharp modules. Using serialized objects provides flexibility and scalability.
• Adding Costura.Fody to avoid having to dependency on the Newtonsoft dll to work with JSON objects. It is now embedded in the PurpleSharp assembly.
• Enhanced lateral movement technique simulations
• Updated ATT&CK Navigator support
• Enhanced Kerberoasting technique simulations

Hotfix

• Fixed issue with /nocleanup parameter

SHA256 Hashes

PurpleSharp_x64.exe - A3FCBDC6BA2D67A65BA3D0802A68551762F3A17E10C0F73EE517764E713E55CE
PurpleSharp_x86.exe - 20FE9B84E43341C428B99F988AE3EE873DFC4987FF4837D902B94AED61DE2710

Download

Some browsers are blocking the assembly download. To circumvent, you can use the following PowerShell line:

Invoke-WebRequest -Uri "https://github.com/mvelazc0/PurpleSharp/releases/download/v1.3/PurpleSharp_x64.exe" -OutFile "PurpleSharp.exe"

May 2021

SHA256 Hashes

PurpleSharp_x64.exe - 6a4534091c5329f54971bd06e479be500d9232c4550a394f1c8b9f6543d2be05
PurpleSharp_x86.exe - 7168f785c2c32bde7d0576a792699c9aa1156ffcb36ad485ff899020c1a66356

Some browsers are blocking the assembly download. To circumvent, you can use the following PowerShell line:

Invoke-WebRequest -Uri "https://github.com/mvelazc0/PurpleSharp/releases/download/v1.2/PurpleSharp_x64.exe" -OutFile "PurpleSharp.exe"

Release Notes

• Adding Costura.Fody to avoid having to dependency on the Newtonsoft dll to manage JSON objects. It is now embedded in the PurpleSharp assembly.

March 2021

SHA256 Hash

PurpleSharp.exe - 0a29f1b2b10c0026a64ea52e66ac6cb85a2d198d870c141c7d431f7900b7a1b8

Some browsers are blocking the assembly download. To circumvent, you can use the following PowerShell line:

• Invoke-WebRequest -Uri "https://github.com/mvelazc0/PurpleSharp/releases/download/v1.1/PurpleSharp.exe" -OutFile "PurpleSharp.exe"

Release Notes

• Adding Costura.Fody to avoid having to dependency on the Newtonsoft dll to manage JSON objects. It is now embedded in the PurpleSharp assembly.

BlackHat Arsenal 2020

SHA256 Hashes
PurpleSharp.exe - a58c5a337e855070a95ae012a2fe14ecc724c239f54ae597d822f373c57e5228
Newtonsoft.Json.dll - 7f912b28a07c226e0be3acfb2f57f050538aba0100fa1f0bf2c39f1a1f1da814