This project is intended to serve as reference when designing Cobalt Strike Malleable C2 profiles.
Always verify your profile with ./c2lint [/path/to/my.profile]
prior to use!
- Add latest MalleablePE and MalleableC2 options for Cobalt Strike 4.1 and 4.2
- 4.1 Additions:
tcp_frame_header
,smb_frame_header
,ssh_banner
- 4.2 Additions:
- global
data_jitter
headers_remove
ssh_pipename
- postex
pipename
thread_hint
keylogger
- stage
allocator
magic_mz_86|magic_mz_64
magic_pe
- global
- Add CS4.0 reference profile of available malleable C2 options
- Remove deprecated features (
amsi_disable
,disable
for process injection techniques, etc)
- @joevest
- @001SPARTaN
- @andrewchiles
This project and all individual scripts are under the GNU GPL v3.0 license.