Malleable-C2-Profiles

Cobalt Strike - Malleable C2 Profiles A collection of profiles used in different projects using Cobalt Strike https://www.cobaltstrike.com/...

BlueSAM

BlueSAM BOF A Cobalt Strike Beacon Object File adaptation of BlueHammer that attempts to obtain a copy of the SAM database through Windows Defender update/VSS behavior and process offline registry data from Beacon. Credits to Nightmare-Eclipse's BlueHammer...

CVE-2002-0347

CVE-2002-0347 Directory traversal vulnerability in Cobalt RAQ 4 allows remote attackers to read password-protected files, and possibly files outside the web root, via a .. dot dot in an HTTP request. Packetstorm publication at https://packetstormsecurity.com/files/25837/Colbalt-RAQ-v4.txt.html...

Ledger

Ledger — Operational Change Tracker Aggressor Script Ledger is a Cobalt Strike aggressor script that tracks every operational change made during an engagement. Every service you enable, firewall rule you punch through, account you create, or registry key you touch gets logged with a risk score,...

Cobaltstrike_BOFLoader

CobaltstrikeBOFLoader This is an open source port/reimplementation of the Cobalt Strike BOF Loader as is. For the most part, everything is done as in the original Beacon + Teamserver in Cobalt Strike. This includes shortcomings that are resolved in other open source COFF loaders such as the...

MoveKit

MoveKit - Kit de movimiento lateral de Cobalt Strike Movekit es una extensión del movimiento lateral integrado de Cobalt Strike que aprovecha la función executeassembly con los ensamblados .NET SharpMove y SharpRDP. El script agresor maneja la creación de payloads leyendo los archivos de plantill...

SharpSpray

SharpSpray Este proyecto es un puerto en C de mi script PowerSpray.ps1. SharpSpray es un conjunto de código simple para realizar un ataque de rociado de contraseñas contra todos los usuarios de un dominio usando LDAP y es compatible con Cobalt Strike...

ycsm

You Can't See Me YCSM This is a quick script installation for resilient redirector using nginx reverse proxy and letsencrypt compatible with some popular RATS Cobalt Strike, Empire, Metasploit. If HTTPS was selected, it will automatically setup letsencrypt certbot and obtain valid letsencrypt SSL...

CustomC2ChannelTemplate

IAT Hooking for custom C2 channels This is a simple PoC and template for developing custom C2 channels for Cobalt Strike using IAT hooks applied by a reflective loader. Blog post: https://codex-7.gitbook.io/codexs-terminal-window/red-team/cobalt-strike/building-custom-c2-channels-by-hooking-winin...

BeaconHunter

BeaconHunter Herramienta de monitoreo y caza basada en comportamiento construida en C que aprovecha el rastreo ETW. Los equipos azules pueden usar esta herramienta para detectar y responder a posibles beacons de Cobalt Strike. Los equipos rojos pueden usar esta herramienta para investigar omision...

CVE-2020-0787

CVE-2020-0787（named pipe） It's Just A Demo,Do not use in real. -Get result for Command executionUse cmd /c： exp.exe "cmd /c whoami \\.\pipe\showme " show -Run beacon.exe： exp.exe "C:/beacon.exe" For CobaltStrike It's better one than current project:...

CVE-2024-26229-BOF

CVE-2024-26229 Beacon Object Files Beacon Object File BOF implementations from NVISO of CVE-2024-26229 for Cobalt Strike and BruteRatel. Compile with: root@kitploit: gcc -c CVE-2024-26229-bof.c -o CVE-2024-26229-bof.o This vulnerability was patched on April 9th, 2024. See...

InlineExecute-Assembly

InlineExecute-Assembly InlineExecute-Assembly es una prueba de concepto de archivo de objeto de baliza BOF que permite a los profesionales de seguridad realizar la ejecución de ensamblados .NET en proceso como alternativa al módulo tradicional de fork and run execute-assembly de Cobalt Strike...

cs_yara

csyara Check Cobalt Strike Yara Rules 参考链接 https://github.com/CCob/BeaconEye BeaconEye Bug Fix: https://wbglil.gitbook.io/cobalt-strike/cobalt-strike-gong-ji-fang-yu/untitled-1 rule from https://raw.githubusercontent.com/CCob/BeaconEye/master/BeaconEye.cs beaconEye.yar root@kitploit: rule...

external_c2_framework

externalc2 framework Python framework for building and utilizing interfaces to transfer data between frameworks, with a specific focus on serving as an extension to Command and Control frameworks. Currently, this is only intended as an implementation of Cobalt Strike's External C2 specification a...

CVE-2024-35250-BOF

CVE-2024-35250-BOF Beacon Object File BOF implementation of CVE-2024-35250 for Cobalt Strike. Compiled with Visual Studio. Acknowledgments All credit for the exploit code goes to the original author varwara. Disclaimer I am not responsible for any crimes against humanity or nuclear war that you m...

injectAmsiBypass

Cobalt Strike BOF - Inyectar omisión de AMSI Archivo de Objeto Beacon BOF de Cobalt Strike que omite AMSI en un proceso remoto mediante inyección de código. Ejecutando el BOF inject-amsiBypass desde CobaltStrike ¿Qué hace esto? 1. Usa el argumento PID proporcionado para obtener un identificador...

RdpThief

RdpThief RdpThief by itself is a standalone DLL that when injected in the mstsc.exe process, will perform API hooking, extract the clear-text credentials and save them to a file. An aggressor script accompanies it, which is responsible for managing the state, monitoring for new processes and...

BokuLoader

BokuLoader : Cobalt Strike Reflective Loader A proof-of-concept User-Defined Reflective Loader UDRL which aims to recreate, integrate, and enhance Cobalt Strike's evasion features! Contributors:...

1135-CobaltStrike-ToolKit

1135-CobaltStrike-ToolKit Malleable C2 Files Cobalt Strike's Malleable C2 profiles are designed to counter traffic analysis. Cobalt Strike's Malleable C2 profiles define the "communication format specifications and methods" of C2 traffic between the victim and the team server. By disguising C2...