SourcePoint is a C2 profile generator for Cobalt Strike command and control servers designed to ensure evasion.

This project is 'bridge' between the sleep and python language. It allows the control of a Cobalt Strike teamserver through python without the need for for the standard GUI client. NOTE: This proje…

Cobalt Strike Malleable C2 Design and Reference Guide

Cobalt Strike is a post-exploitation framework designed to be extended and customized by the user community. Several excellent tools and scripts have been written and published, but they can be cha…

My collection of battle-tested Aggressor Scripts for Cobalt Strike 4.0+

Proof of concept Beacon Object File (BOF) that uses static x64 syscalls to perform a complete in memory dump of a process and send that back through your already existing Beacon communication channel

Proof of concept Beacon Object File (BOF) that uses static x64 syscalls to perform a complete in memory dump of a process and send that back through your already existing Beacon communication channel

Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.

The Hunting ELK