NEW BOT Телеграм, страница

https://www.noscript01.net/2018/08/22/一起來看看cobaltstrike和armitage聯動能達到什麼效果/

708 views08:49

Little exfil C# tool for compressing, encrypting, and uploading data to Dropbox. Works great using "execute-assembly" in Cobalt Strike.

https://github.com/P1CKLES/SharpBox

GitHub

GitHub - P1CKLES/SharpBox: SharpBox is a C# tool for compressing, encrypting, and exfiltrating data to DropBox using the DropBox…

SharpBox is a C# tool for compressing, encrypting, and exfiltrating data to DropBox using the DropBox API. - GitHub - P1CKLES/SharpBox: SharpBox is a C# tool for compressing, encrypting, and exfil...

635 views14:52

cobaltstrike

https://bluescreenofjeff.com/2017-01-24-how-to-write-malleable-c2-profiles-for-cobalt-strike/

bluescreenofjeff.com - a blog about penetration testing and red teaming

How to Write Malleable C2 Profiles for Cobalt Strike

It’s not fun to get caught on an assessment because your target has your toolset signatured. It’s even less fun if that signature is easily bypassed. Cobalt Strike’s Malleable C2 is a method of avoiding that problem when it comes to command and control (C2)…

613 views21:23

cobaltstrike

https://posts.specterops.io/a-deep-dive-into-cobalt-strike-malleable-c2-6660e33b0e0b

Medium

A Deep Dive into Cobalt Strike Malleable C2

One of Cobalt Strike’s most valuable features is its ability to modify the behavior of the Beacon payload. By changing various defaults…

617 views06:34

cobaltstrike

https://www.youtube.com/watch?v=XWV60J8m3S4
https://github.com/SleepZ3R0/CobaltStrike-Logging

YouTube

Cobalt Strike Survey Script to .CSV mrbs.py

https://github.com/SleepZ3R0/CobaltStrike-Logging

606 views20:20

cobaltstrike

https://github.com/threatexpress/aggressor-noscripts/tree/master/beacon_webview

GitHub

aggressor-noscripts/beacon_webview at master · threatexpress/aggressor-noscripts

Cobalt Strike Aggressor Scripts. Contribute to threatexpress/aggressor-noscripts development by creating an account on GitHub.

645 views05:54

cobaltstrike

Reference Malleable C2 profile was just updated to take advantage of the latest #CobaltStrike 3.12 additions.
https://github.com/threatexpress/malleable-c2

GitHub

GitHub - threatexpress/malleable-c2: Cobalt Strike Malleable C2 Design and Reference Guide

Cobalt Strike Malleable C2 Design and Reference Guide - threatexpress/malleable-c2

660 views12:39

cobaltstrike

smbexec_psh.cna

1.4 KB

Had some problems with Cobalt Strike's psexec & mimikatz functions today, so was able to cobble together a solution to achieve psexec from one domain to another with Invoke-SMBExec.ps1

886 viewsedited 12:56

cobaltstrike

https://github.com/ztgrace/red_team_telemetry

GitHub

GitHub - ztgrace/red_team_telemetry

Contribute to ztgrace/red_team_telemetry development by creating an account on GitHub.

676 views05:46

cobaltstrike

https://github.com/jamesbcook/terraform

GitHub

GitHub - jamesbcook/terraform

Contribute to jamesbcook/terraform development by creating an account on GitHub.

698 views10:56

cobaltstrike

Cobalt Strike Situational Awareness Commands
https://gist.github.com/HarmJ0y/fe676e3ceba74f22a28bd1b121182db7

Gist

Cobalt Strike Situational Awareness Commands

Cobalt Strike Situational Awareness Commands. GitHub Gist: instantly share code, notes, and snippets.

743 views09:07

cobaltstrike

Command and Control via DNS over HTTPS (DoH) for Cobalt Strike
https://github.com/SpiderLabs/DoHC2

GitHub

GitHub - SpiderLabs/DoHC2: DoHC2 allows the ExternalC2 library from Ryan Hanson (https://github.com/ryhanson/ExternalC2) to be…

DoHC2 allows the ExternalC2 library from Ryan Hanson (https://github.com/ryhanson/ExternalC2) to be leveraged for command and control (C2) via DNS over HTTPS (DoH). - SpiderLabs/DoHC2

683 views13:34

cobaltstrike

Newest blog post talks about AggressorAssessor, a collection of Cobalt Strike Aggressor Scripts for all stages of the attack lifecycle, Automation and more!

https://www.fortynorthsecurity.com/aggressorassessor-and-automation/

FortyNorth Security Blog

AggressorAssessor - Cobalt Strike Aggressor Scripts

I (@ChrisTruncer) had the opportunity to speak at Wild West Hackin Fest last week along with Harley LeBeau (@r3dQu1nn) on a topic we called “Aggressive Autonomous Actions – Operating with Automation”. This was a talk that we have been working on for a few…

672 views06:11

cobaltstrike

MSFRottenPotato built as a Reflective DLL.
https://github.com/realoriginal/reflectivepotato

703 views12:20

cobaltstrike

https://truneski.github.io/blog/2018/11/05/cobaltstrike-over-external-c2-via-dropbox/

656 views14:58

cobaltstrike

https://github.com/SpiderLabs/SharpCompile

GitHub

GitHub - SpiderLabs/SharpCompile: SharpCompile is an aggressor noscript for Cobalt Strike which allows you to compile and execute…

SharpCompile is an aggressor noscript for Cobalt Strike which allows you to compile and execute C# in realtime. This is a more slick approach than manually compiling an .NET assembly and loading it i...

628 views12:31

cobaltstrike

Python API for Cobalt Strike.

https://www.sploitkit.com/pycobalt-python-api-for-cobalt-strike/
https://github.com/dcsync/pycobalt

GitHub

GitHub - dcsync/pycobalt: Cobalt Strike Python API

Cobalt Strike Python API. Contribute to dcsync/pycobalt development by creating an account on GitHub.

676 views15:24

cobaltstrike

How to use execute-assembly with big C# payload?

Beacon has a hard-coded 1MB limit going back to 2012. It's so deeply baked in there I haven't made an attempt to move it upwards or build some sort of chunking mechanism for oversized tasks.
We've been using SharpCradle to get around that limitation, use assembly execution to pull in the smaller SharpCradle assembly in as an intermediate stage, which then turns around and pulls whatever larger assembly / .net project file you're looking for from a remote server.

718 viewsedited 08:27

cobaltstrike

Web UI for creating C2 profiles for Cobalt Strike
https://github.com/hattmo/c2profilejs

709 views12:16

cobaltstrike

https://blog.fox-it.com/2018/08/14/phishing-ask-and-ye-shall-receive/

Fox-IT International blog

Phishing – Ask and ye shall receive

During penetration tests, our primary goal is to identify the difference in paths that can be used to obtain the goal(s) as agreed upon with our customers. This often succeeds due to insufficient h…

878 views21:24

cobaltstrike

https://github.com/bitsadmin/nopowershell