aggrokatz
by sec-consult
Aggrokatz is an aggressor plugin extension for Cobalt Strike which enables pypykatz to interface with the beacons remotely and allows it to parse LSASS dump files and registry hive files to extract credentials and other secrets stored without downloading the file and without uploading any suspicious code to the beacon.
AI summary
Parser
An aggressor plugin extension for Cobalt Strike that enables remote parsing of LSASS dump files and registry hive files without downloading or uploading suspicious code.
- stars
- 155
- forks
- 28
- watching
- 8
Similar projects
Found by comparing what the projects do, not just their names.
Exploit kit
A Cobalt Strike plugin package with various exploit and password cracking tools.
CS notification system
Automated notifications and collaboration tools for Cobalt Strike threat simulations
Penetration testing tools
Scripts and tools for probing and exploiting Cobalt Strike environments
Exploitation toolkit
A Cobalt Strike plugin that provides a suite of tools for vulnerability exploitation and network reconnaissance.
Toolset
A collection of utility scripts for running Cobalt Strike tools and executing specific tasks
Attack payload scripts
Scripts designed to be used as payloads in Cobalt Strike attacks
Aggressor scripts
A collection of Cobalt Strike Aggressor scripts used by the author.
Aggressor Scripts
A collection of PowerShell scripts designed to be used in Cobalt Strike for various aggressive operations.
Evasion tool
A tool for integrating Cobalt Strike payloads with ScareCrow to evade antivirus detection and improve evasion capabilities.
Beacon parser
A toolset to extract and analyze configurations from malware samples known as Cobalt Strike Beacons.
Exploit parser
Library for dissecting and parsing data related to Cobalt Strike exploits
Attack toolkit
A collection of scripts designed to support advanced Cobalt Strike 3.0+ attacks
Intrusion tool
An aggressor script that allows Cobalt Strike to perform process injection and persistence by leveraging direct syscalls to bypass EDR/AV systems.
Script toolkit
A collection of battle-tested PowerShell scripts for Cobalt Strike 4.0+
Penetration scanner
A comprehensive penetration testing toolset with modular plugins for network scanning, vulnerability detection, and exploitation
