Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources

Situational Awareness commands implemented using Beacon Object Files

The swiss army knife of LSASS dumping

Aggressor scripts for use with Cobalt Strike 3.0+

A BOF that runs unmanaged PEs inline

An alternative screenshot capability for Cobalt Strike that uses WinAPI and does not perform a fork & run. Screenshot downloaded in memory.

Collection of penetration test reports and pentest report templates. Published by the the best security companies in the world.

Print Spooler Named Pipe Impersonation for Cobalt Strike

CrossC2 developed based on the Cobalt Strike framework can be used for other cross-platform system control. CrossC2Kit provides some interfaces for users to call to manipulate the CrossC2 Beacon session, thereby extending the functionality of Cobalt Strike.

A collection of Cobalt Strike Aggressor scripts.

An all-in-one Cobalt Strike BOF to patch, check and revert AMSI and ETW for x64 process. Both syscalls and dynamic resolve versions are available.

Vampire is an aggressor script which integrates with BloodHound to mark nodes as owned.

Homemade Aggressor scripts kit for Cobalt Strike

Aggressorscript that turns the headless aggressor client into a (mostly) functional cobalt strike client.

CobatStrike-Script, Beacon上线,微信实时推送!

Cobalt Strike automation scripts collection

Everything related to Cobalt Strike

Caché Native Access (CNA)

CVE-ICU is a research project that automatically pulls all CVE data from the NVD and performs fundamental data analysis and graphing.

Proxy for bypass iOS Captive Network Assistant