CobaltStrikeScan
Beacon scanner
A tool for detecting and parsing CobaltStrike beacon configuration from files or process memory.
Scan files or process memory for CobaltStrike beacons and parse their configuration
902 stars
27 watching
116 forks
Language: C#
last commit: about 5 years agoLinked from 2 awesome lists
fabacab/awesome-cybersecurity-blueteam
uhub/awesome-c-sharpRelated projects:
| Repository | Description | Stars |
|---|---|---|
 3lp4tr0n/beaconhunter | A tool for detecting and responding to potential Cobalt Strike beacons using Extended Trace Record (ETW) tracing | 482 |
 ccob/beaconeye | A tool designed to detect and monitor malicious beacon activity from CobaltStrike, providing insights into operator command output. | 892 |
 akkuman/evileye | A tool used to detect and analyze malicious beacon activity in memory using Go programming language | 148 |
 strozfriedberg/cobaltstrike-config-extractor | A toolset to extract and analyze configurations from malware samples known as Cobalt Strike Beacons. | 148 |
 sentinel-one/cobaltstrikeparser | Deciphers CobaltStrike Beacon configurations from various formats. | 1,028 |
 te-k/cobaltstrike | Detects and analyzes Cobalt Strike beacons by analyzing HTTP responses and extracting configuration information. | 266 |
 wafinfo/cobaltstrike | A plugin for Cobalt Strike that automates various tasks such as domain lookup, information gathering, and internal network scanning. | 179 |
 splunk/melting-cobalt | Tool to hunt and mine Cobalt Strike beacons from internet-connected services | 164 |
 z3ratu1/geacon_plus | A Go implementation of a CobaltStrike beacon with support for multiple platforms and various communication protocols | 397 |
 cobalt-strike/beacon_health_check | An aggressor script that tracks the health status of beacons based on their note field | 137 |
 romanemelyanov/cobaltstrikeforensic | Toolset to analyze and research malware and Cobalt Strike beacon behavior | 206 |
 pwn1sher/cs-bofs | A collection of compiled beacon object files from the CobaltStrike platform. | 101 |
 b1tg/cobaltstrike-beacon-rust | A Cobalt Strike beacon implementation in Rust for creating malicious network connections | 180 |
 fox-it/cobaltstrike-beacon-data | Historical metadata of Cobalt Strike Beacon attacks | 125 |
 eremit4/cs-discovery | Detects malicious servers in network traffic by analyzing encoded byte patterns | 20 |