1135-CobaltStrike-ToolKit

1135-CobaltStrike-ToolKit Malleable C2 Files Los archivos de perfil Malleable C2 de Cobalt Strike están diseñados para contrarrestar el análisis de tráfico. Definen el «formato y método de comunicación» del tráfico C2 entre la víctima y el servidor del equipo. Al hacer pasar el tráfico C2 por...

cs2modrewrite

Genera Automáticamente Reglas para Apache modrewrite o Nginx para Redirección Inteligente de C2 por HTTP Este proyecto convierte un perfil de Cobalt Strike en un archivo funcional de modrewrite .htaccess o de configuración de Nginx para soportar la redirección por proxy inverso HTTP hacia el...

Malleable-C2-Profiles

Este repositorio no tiene un README...

OpenMalleableC2

OpenMalleableC2 Open Source Implementation of Cobalt Strike's Malleable C2 OpenMalleableC2 is a framework-agnostic library that implements Cobalt Strike's Malleable C2 profile format for HTTP transformations. It enables security researchers and red teams to easily implement malleable C2...

inject-assembly

inject-assembly - Execute .NET in an Existing Process This tool is an alternative to traditional fork and run execution for Cobalt Strike. The loader can be injected into any process, including the current Beacon. Long-running assemblies will continue to run and send output back to the Beacon,...

malleable-c2

Guía de referencia para el diseño de Malleable C2 de Cobalt Strike Este proyecto pretende servir como referencia al diseñar perfiles Malleable C2 de Cobalt Strike. ¡Verifique siempre su perfil con ./c2lint /ruta/a/mi.perfil antes de usarlo! Guía de perfiles Malleable C2 Lo siguiente profundiza en...

pyMalleableC2

pyMalleableC2 Un intérprete de Python para perfiles Malleable C2 de Cobalt Strike que te permite analizarlos, modificarlos, construirlos programáticamente y validar su sintaxis. Soporta toda la gramática de perfiles Malleable C2 de Cobalt Strike a partir de la versión 4.3. No es compatible hacia...

AzureC2Relay

AzureC2Relay AzureC2Relay is an Azure Function that validates and relays Cobalt Strike beacon traffic by verifying the incoming requests based on a Cobalt Strike Malleable C2 profile. Any incoming requests that do not share the profiles user-agent, URI paths, headers, and query parameters, will b...

Malleable-C2-Randomizer

Malleable-C2-Randomizer Este script randomiza perfiles Malleable C2 de Cobalt Strike mediante el uso de un metalenguaje, reduciendo así las posibilidades de activar controles de detección basados en firmas. En resumen, el script analiza la plantilla proporcionada, sustituye las variables por un...

Malleable-C2-Profiles

Cobalt Strike - Perfiles C2 Maleables Una colección de perfiles utilizados en diferentes proyectos con Cobalt Strike https://www.cobaltstrike.com/...

antnium

Antnium root@kitploit: Anti Tanium Un framework de C2 y un RAT escritos en Go. Este código fuente se publica públicamente como referencia para mi presentación Develop your own RAT - AV & EDR Defense. Antnium pretende cumplir mis propios requisitos, y no los de otros. Funciona para las campañas qu...

Burp2Malleable

Burp2Malleable Utilidad rápida en Python que escribí para convertir peticiones HTTP de Burp Suite en perfiles Malleable C2 de Cobalt Strike. Permite tomar peticiones capturadas o creadas en BurpSuite o ZAP, POSTMAN, etc. con el aspecto que quieras darle a tu tráfico o con el que quieras...

AutoFunkt

AutoFunkt root@kitploit: d8888 888 8888888888 888 888 d88888 888 888 888 888 d88P888 888 888 888 888 d88P 888 888 888 888888 .d b. 8888888 888 888 88888b. 888 888 888888 d88P 888 888 888 888 d88 88b 888 888 888 888 "88b 888 .88P 888 d88P 888 888 888 888 888 888 888 888 888 888888K 888 d8888888888...

dissect.cobaltstrike

Analizando Cobalt Strike con Python .. image:: https://github.com/fox-it/dissect.cobaltstrike/workflows/Tests/badge.svg :target: https://github.com/fox-it/dissect.cobaltstrike/actions :alt: Estado de GitHub Actions .. image::...

Malleable-C2-Profiles

This repository does not have a README...

Metasploit Framework 6.5 Released

Today we’re proud to announce that Metasploit Framework version 6.5 has been released. Over the past two years, with the help of countless contributors, we’ve added 422 new modules along with a whole slew of new features. Malleable C2 Profiles for HTTP One of the latest and most requested feature...

HiddenDesktop - HVNC For Cobalt Strike

Hidden Desktop often referred to as HVNC is a tool that allows operators to interact with a remote desktop session without the user knowing. The VNC protocol is not involved, but the result is a similar experience. This Cobalt Strike BOF implementation was created as an alternative to...

RedGuard - C2 Front Flow Control Tool, Can Avoid Blue Teams, AVs, EDRs Check

0x00 Introduction Tool introduction RedGuard is a derivative work of the C2 facility pre-flow control technology. It has a lighter design, efficient flow interaction, and reliable compatibility with go language development. The core problem it solves is also in the face of increasingly complex re...

PickleC2 - A Post-Exploitation And Lateral Movements Framework

PickleC2 is a post-exploitation and lateral movements framework. Documentation ReadTheDocs Overview PickleC2 is a simple C2 framework written in python3 used to help the community in Penetration Testers in their red teaming engagements. PickleC2 has the ability to import your own PowerShell modul...

AzureC2Relay - An Azure Function That Validates And Relays Cobalt Strike Beacon Traffic By Verifying The Incoming Requests Based On A Cobalt Strike Malleable C2 Profile

AzureC2Relay is an Azure Function that validates and relays Cobalt Strike beacon traffic by verifying the incoming requests based on a Cobalt Strike Malleable C2 profile. Any incoming requests that do not share the profiles user-agent, URI paths, headers, and query parameters, will be redirected ...