Raphael

Malleable-C2-Profiles. Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable C2 profiles that you may use. These profiles work with Cobalt Strike 3.x.

ElevateKit. The Elevate Kit demonstrates how to use third-party privilege escalation attacks with Cobalt Strike's Beacon payload.

armitage. Automatically exported from code.google.com/p/armitage

cortana-scripts. A collection of Cortana scripts that you may use with Armitage and Cobalt Strike 2.x. Cortana Scripts are not compatible with Cobalt Strike 3.x. Cobalt Strike 3.x uses a variant of Cortana called Aggressor Script.

unhook-bof. Remove API hooks from a Beacon process.

metasploit-loader. A client compatible with Metasploit's staging protocol

vncdll. Stand-alone VNC server compiled as a Reflective DLL

ZeroLogon-BOF. C

Layer2-Pivoting-Client. A simple client to demonstrate Layer-2 pivoting. Compatible with the simpletun.c server written by Davide Brini.

CVE-2020-0796-BOF. C