CS_mock

Packet simulator

A tool to simulate a Cobalt Strike beacon connection packet by parsing the payload and extracting RSA public key

模拟cobalt strike beacon上线包. Simulation cobalt strike beacon connection packet.

GitHub

78 stars
6 watching
16 forks
Language: Python
last commit: about 4 years ago
cobalt-strikecve-2021-36798cve-2022-39197

Related projects:

RepositoryDescriptionStars
riccardoancarani/bofsUtilities for Cobalt Strike's Beacon Object Files to simplify working with shellcode and system processes112
b1tg/cobaltstrike-beacon-rustA Cobalt Strike beacon implementation in Rust for creating malicious network connections180
liaorj/cs_fakesubmitA script to simulate a Cobaltstrike connection130
fox-it/dissect.cobaltstrikeLibrary for dissecting and parsing data related to Cobalt Strike exploits148
te-k/cobaltstrikeDetects and analyzes Cobalt Strike beacons by analyzing HTTP responses and extracting configuration information.266
strozfriedberg/cobaltstrike-config-extractorA toolset to extract and analyze configurations from malware samples known as Cobalt Strike Beacons.148
darkr4y/geaconA Go-based implementation of CobaltStrike's Beacon protocol for reverse engineering and protocol analysis purposes.1,159
splunk/melting-cobaltTool to hunt and mine Cobalt Strike beacons from internet-connected services164
guervild/bofsBeacon object files for Cobalt Strike158
boku7/halosgate-psA Cobalt Strike Beacon Object File (BOF) that uses custom syscaller code to make direct system calls to retrieve process information on the target system.95
fox-it/cobaltstrike-beacon-dataHistorical metadata of Cobalt Strike Beacon attacks125
cobalt-strike/bof-vsA Beacon Object File Visual Studio template project for creating malicious code executables145
boku7/spawnA Cobalt Strike Beacon tool that spawns a sacrificial process to execute shellcode, using techniques like Arbitrary Code Guard and PPID spoofing to evade detection.440
loecho-sec/cobaltstrike_script_wechat_pushAutomated notifications via WeChat Server酱 for CobaltStrike beacons44
jamvayne/cobaltstrikedosA Python script to exploit a Cobalt Strike vulnerability and perform a denial of service attack.103