cna

The swiss army knife of LSASS dumping

Situational Awareness commands implemented using Beacon Object Files

Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources

Aggressor scripts for use with Cobalt Strike 3.0+

A BOF that runs unmanaged PEs inline

An alternative screenshot capability for Cobalt Strike that uses WinAPI and does not perform a fork & run. Screenshot downloaded in memory.

Collection of penetration test reports and pentest report templates. Published by the the best security companies in the world.

Print Spooler Named Pipe Impersonation for Cobalt Strike

CrossC2 developed based on the Cobalt Strike framework can be used for other cross-platform system control. CrossC2Kit provides some interfaces for users to call to manipulate the CrossC2 Beacon session, thereby extending the functionality of Cobalt Strike.

Aggressorscript that turns the headless aggressor client into a (mostly) functional cobalt strike client.

An all-in-one Cobalt Strike BOF to patch, check and revert AMSI and ETW for x64 process. Both syscalls and dynamic resolve versions are available.

A collection of Cobalt Strike Aggressor scripts.

Homemade Aggressor scripts kit for Cobalt Strike

Vampire is an aggressor script which integrates with BloodHound to mark nodes as owned.

CobatStrike-Script, Beacon上线,微信实时推送!

⓪n-demand news navigator

Everything related to Cobalt Strike

Cobalt Strike automation scripts collection

0n-demand news reader ⓪ https://agora0.github.io/news

Beacon Object File to automatically/unattended inject in one of the specified processes.