2017-05-03 16:19:26 +00:00
# Aggressor Scripts
2017-04-21 12:14:36 +00:00
Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources
2017-04-21 12:35:04 +00:00
* All_In_One.cna v1
* All purpose script to enhance the user's experience with cobaltstrike. Custom menu creation, Logging, Persistence, Enumeration, and 3rd party script integration.
* Thanks to @rsmudge , @enigma0x3 , @harmj0y , PowerShell Mafia folks, Nathan Wray, @Und3rFl0w , @oldb00t , bluescreenofjeff for all the help and code snippets.
* Script must reside in /opt/cobaltstrike/ directory. (Location can be changed inside the script)
2017-05-01 12:47:53 +00:00
**All_In_One.cna Dependencies:**
2017-04-21 12:35:04 +00:00
2017-04-25 19:25:33 +00:00
Parent Folder/Files:
/opt/cobaltstrike/All_In_One.cna
/opt/cobaltstrike/av_hips_executables.txt
/opt/cobaltstrike/logs.py
Sub Folders:
/opt/cobaltstrike/scripts/
/opt/cobaltstrike/Payloads/
/opt/cobaltstrike/modules/
2017-04-21 12:37:46 +00:00
Elevate Kit (Licensed Users Only)
2017-07-07 02:36:59 +00:00
* ArtifactPayloadGenerator.cna
* Generates every type of Stageless/Staged Payload based off a HTTP/HTTPS Listener
* Creates /opt/cobaltstrike/Staged_Payloads, /opt/cobaltstrike/Stageless_Payloads
2017-07-10 18:36:50 +00:00
* AVQuery.cna
* Queries the Registry with powershell for all AV Installed on the target
* Quick and easy way to get the AV you are dealing with as an attacker
2017-07-17 15:24:25 +00:00
2017-09-02 03:20:26 +00:00
* CertUtilWebDelivery.cna
* Stageless Web Delivery using CertUtil.exe
* Powerpick is used to spawn certutil.exe to download the stageless payload on target and execute with rundll32.exe
2017-09-04 09:36:43 +00:00
* RedTeamRepo.cna
* A common collection of OS commands, and Red Team Tips for when you have no Google or RTFM on hand.
* Script will be updated on occasion, feedback and more inputs are welcomed!
2017-12-05 00:00:47 +00:00
* ProcessColor.cna
* Color coded process listing without the file requirement.
* Thanks to @oldb00t for the original version: https://github.com/oldb00t/AggressorScripts/tree/master/Ps-highlight
