edit-gencon
Beacon decoder
Toolset for decoding and compiling CobaltStrike Beacon keys
geacon:简单适配了一个profile配置文件,可直接拿来修改使用,用于cs上线linux.
158 stars
3 watching
21 forks
Language: Go
last commit: over 2 years ago Related projects:
Repository | Description | Stars |
---|---|---|
z3ratu1/geacon_plus | A Go implementation of a CobaltStrike beacon with support for multiple platforms and various communication protocols | 394 |
darkr4y/geacon | A Go-based implementation of CobaltStrike's Beacon protocol for reverse engineering and protocol analysis purposes. | 1,145 |
sentinel-one/cobaltstrikeparser | Deciphers CobaltStrike Beacon configurations from various formats. | 1,022 |
xxjwxc/public | A comprehensive utility package for Go programmers | 175 |
qigpig/bypass-beacon-config-scan | Tools to bypass cobaltstrike beacon config scan vulnerability | 84 |
fox-it/cobaltstrike-beacon-data | Historical metadata of Cobalt Strike Beacon attacks | 122 |
te-k/cobaltstrike | Detects and analyzes Cobalt Strike beacons by analyzing HTTP responses and extracting configuration information. | 262 |
loecho-sec/cobaltstrike_script_wechat_push | Automated notifications via WeChat Server酱 for CobaltStrike beacons | 44 |
akkuman/evileye | A tool used to detect and analyze malicious beacon activity in memory using Go programming language | 149 |
b1tg/cobaltstrike-beacon-rust | A Cobalt Strike beacon implementation in Rust for creating malicious network connections | 177 |
strozfriedberg/cobaltstrike-config-extractor | A toolset to extract and analyze configurations from malware samples known as Cobalt Strike Beacons. | 145 |
nccgroup/pybeacon | A collection of Python scripts for analyzing and interacting with Cobalt Strike beacons. | 167 |
apr4h/cobaltstrikescan | A tool for detecting and parsing CobaltStrike beacon configuration from files or process memory. | 900 |
romanemelyanov/cobaltstrikeforensic | Toolset to analyze and research malware and Cobalt Strike beacon behavior | 206 |
bradleyfalzon/apicompat | Checks Go projects for changes that might break existing code | 179 |