c2_reporter

C2 Reporter

Analyzes logs from Cobalt and Empire to generate an Excel report on C2 activity, sessions, and credentials.

Ingests logs/dbs from cobalt and empire and outputs an excel report with activity, sessions, and credentials

GitHub

20 stars
4 watching
3 forks
Language: Python
last commit: almost 4 years ago

Related projects:

Repository Description Stars
drb-ra/c2intelfeeds Automatically generated C2 feed data from Censys search results 531
threatexpress/cs2modrewrite Automates conversion of Cobalt Strike profiles to modrewrite scripts for HTTP C2 redirection 583
tevora-threat/aggressor-powerview Provides a user interface for @harmjoy's PowerView script in Cobalt Strike 66
tevora-threat/sharpview A C# port of a domain enumeration and privilege escalation tool 1,007
verctor/cobalt_homework An analysis project of Cobalt Strike C2 protocol in Python. 67
threatexpress/random_c2_profile Generates random C2 profiles for testing and simulation 627
tevora-threat/powerview3-aggressor A Cobalt Strike script menu for PowerView and SharpView 127
redsiege/c2concealer A command line tool that generates randomized C2 malleable profiles for use in threat simulation and red teaming exercises. 1,013
mvelazc0/oriana A tool for analyzing Windows event logs to identify potential security threats and suspicious behavior in corporate environments. 177
huskyhacks/cobaltnotion A research project that creates a Cobalt Strike-compatible Notion profile to mimic the app's behavior and facilitate collaboration 52
ptr32void/ostrica A framework to collect and visualize threat intelligence information from various sources in a flexible and plugin-based architecture. 308
leonjza/tc2 Provides example C2 stacks using Traefik for fronting malicious tools and services 26
rasta-mouse/externalc2.net An implementation of Cobalt Strike's External C2 specification using .NET libraries 83
eremit4/cs-discovery Detects malicious servers in network traffic by analyzing encoded byte patterns 20
und3rf10w/external_c2_framework A Python framework for building data transfer interfaces between frameworks and Command and Control systems. 225