Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources

Go to file

Harley Lebeau 6023af657a Update README.md		2017-05-25 07:47:59 -04:00
Persistence	Update README.md	2017-05-25 07:47:59 -04:00
All_In_One.cna	Update All_In_One.cna	2017-05-20 04:08:18 -04:00
Logger.cna	Update Logger.cna	2017-05-20 04:08:35 -04:00
README.md	Update README.md	2017-05-25 07:23:14 -04:00
av_hips_executables.txt	Add files via upload	2017-04-21 08:22:13 -04:00
logs.py	logs.py to collect all CS logs	2017-04-25 15:17:52 -04:00

README.md

Aggressor Scripts

Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources

All_In_One.cna v1
- All purpose script to enhance the user's experience with cobaltstrike. Custom menu creation, Logging, Persistence, Enumeration, and 3rd party script integration.
- Thanks to @rsmudge, @enigma0x3, @harmj0y, PowerShell Mafia folks, Nathan Wray, @Und3rFl0w, @oldb00t, bluescreenofjeff for all the help and code snippets.
- Script must reside in /opt/cobaltstrike/ directory. (Location can be changed inside the script)

All_In_One.cna Dependencies:

Parent Folder/Files: 
    /opt/cobaltstrike/All_In_One.cna
    /opt/cobaltstrike/av_hips_executables.txt 
    /opt/cobaltstrike/logs.py
Sub Folders: 
    /opt/cobaltstrike/scripts/
    /opt/cobaltstrike/Payloads/
    /opt/cobaltstrike/modules/
Elevate Kit (Licensed Users Only)

Logger.cna
- Logging script that captures all the Beacon outputs. Formats the Beacon input line to display timestamps. Use with logs.py to export all the logs for each operator.
- All logs will be created inside the /opt/cobaltstrike/logs/ directory

Logger.cna Dependencies:

Parent Folder:
/opt/cobaltstrike/Logger.cna
/opt/cobaltstrike/av_hips_executables.txt
/opt/cobaltstrike/logs.py

logs.py
- Author: Matthew Merrill @noone
- Python Script to parse all cobalt input/output logs and export into a HTML document
- *Still in Beta Stage
- Syntax: ./logs.py [Teamserver NickName]