The swiss army knife of LSASS dumping

• UpdatedSep 17, 2024
• C

Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources

• UpdatedJun 30, 2023
• C#

Situational Awareness commands implemented using Beacon Object Files

• UpdatedJan 6, 2025
• C

Aggressor scripts for use with Cobalt Strike 3.0+

• UpdatedSep 9, 2022

A BOF that runs unmanaged PEs inline

• UpdatedOct 23, 2024
• C

An alternative screenshot capability for Cobalt Strike that uses WinAPI and does not perform a fork & run. Screenshot downloaded in memory.

• UpdatedFeb 24, 2025
• C

Print Spooler Named Pipe Impersonation for Cobalt Strike

• UpdatedJun 13, 2020
• C

CrossC2 developed based on the Cobalt Strike framework can be used for other cross-platform system control. CrossC2Kit provides some interfaces for users to call to manipulate the CrossC2 Beacon session, thereby extending the functionality of Cobalt Strike.

• UpdatedAug 8, 2023
• Shell

Aggressorscript that turns the headless aggressor client into a (mostly) functional cobalt strike client.

• UpdatedSep 8, 2022

An all-in-one Cobalt Strike BOF to patch, check and revert AMSI and ETW for x64 process. Both syscalls and dynamic resolve versions are available.

• UpdatedOct 1, 2022
• C

A collection of Cobalt Strike Aggressor scripts.

• UpdatedJan 3, 2022
• PowerShell

Vampire is an aggressor script which integrates with BloodHound to mark nodes as owned.

• UpdatedApr 6, 2021
• Python

Homemade Aggressor scripts kit for Cobalt Strike

• UpdatedMar 5, 2025

CobatStrike-Script, Beacon上线,微信实时推送!

• UpdatedApr 21, 2020

0n-demand news navigator ⓪

• UpdatedMar 2, 2025
• HTML

Everything related to Cobalt Strike

• UpdatedFeb 3, 2020

Cobalt Strike automation scripts collection

• UpdatedOct 28, 2020
• PowerShell

OpenShift application migration

• UpdatedDec 18, 2017
• Go

0n-demand news reader ⓪https://agora0.github.io/news

• UpdatedMar 17, 2025
• HTML

Proxy for bypass iOS Captive Network Assistant

• UpdatedSep 3, 2020
• Go