poppopdrivel Goto Github PK

365cs

CobaltStrike相关内容

active_c2_ioc_public

Active C2 IoCs

aggressor_dingding

cobaltstrike 上线提醒

awesome-cobaltstrike-defence

Defences against Cobalt Strike

bulletshit

bulletshit

c2-jarm

A list of JARM hashes for different ssl implementations used by some C2/red team tools.

c2concealer

C2concealer is a command line tool that generates randomized C2 malleable profiles for use in Cobalt Strike.

c2intelfeeds

Automatically created C2 Feeds

coba

cobalt-arsenal

My collection of battle-tested Aggressor Scripts for Cobalt Strike 4.0+

cobalt-strike-aggressor-scripts

Cobalt Strike Aggressor 插件包

cobalt_strike_detections

Collection of information about Cobalt Strike and detection work

cobaltstrike

Code and yara rules to detect and analyze Cobalt Strike

cobaltstrike-extraneous-space

Historical list of {Cobalt Strike,NanoHTTPD} servers

cobaltstrikeconfigparser

C# Library for Parsing CobaltStrike beacon configurations from process memory or files

cobaltstrikeforensic

Toolset for research malware and Cobalt Strike beacons

cobaltstrikeparser

cobaltstrikescan

Scan files or process memory for CobaltStrike beacons and parse their configuration

cobaltstrikesource

Cobaltstrike4.1 Source

cs-scripts

研究CobaltStrike时的一些副产品

cs_decrypt

detectcobaltstomp

Detects Module Stomping as implemented by Cobalt Strike

domainblocklist

:zap: This is a threat intelligence automatic crawling tool that also contains some high-value threat intelligence.

grab_beacon_config

malleable-c2

Cobalt Strike Malleable C2 Design and Reference Guide

malleable-c2-profiles

Cobalt Strike - Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike https://www.cobaltstrike.com/.

maltrail

Malicious traffic detection system

nmap_beacon_grab

Light weight Nmap container that brings in Cobalt Strike Beacon parser.

povlsomware

Extensionless Ransomware written in C#. Fully compatible with Cobalt Strikes "Execute-Assembly" and Metasploits "Execute_dotnet_assembly". Does not spread laterally, and thus make for an excellent Ransomware Proof of Concept and/or for testing AV Vendors claim of "Ransomware Protection".

pycobalt

Cobalt Strike Python API