attactics / cslogwatchLinks
Cobalt Strike log state tracking, parsing, and storage
☆24Updated 6 years ago
Alternatives and similar repositories for cslogwatch
Users that are interested in cslogwatch are comparing it to the libraries listed below
Sorting:
- .net tool that uses WMI queries to enumerate active sessions and accounts configured to run services on remote systems☆36Updated 6 years ago
- Protect your servers with a secret header☆29Updated 5 years ago
- Library of traffic redirectors☆26Updated 5 years ago
- Bash one-liner that will parse harmj0y's SharpRoast or Rebeus kerberoast into hashcat crack-able format.☆32Updated 6 years ago
- ☆26Updated 7 years ago
- The project is called GreatSCT (Great Scott). GreatSCT is an open source project to generate application white list bypasses. This tool i…☆29Updated 7 years ago
- ☆69Updated 7 years ago
- Generate Mimikatz Golden Ticket commands with ease!☆51Updated 5 years ago
- ☆25Updated 7 years ago
- Microsoft Applocker evasion tool☆39Updated 6 years ago
- Extract the password of the current user from flow (keylogger, config file, ..) Use SSPI to get a valid NTLM challenge/response and test …☆59Updated 6 years ago
- ☆28Updated 8 years ago
- SilkETW & SilkService☆40Updated 6 years ago
- Obtains a list of GPOs based on known Client Side Extensions (CSE) that normally contain passwords☆33Updated 6 years ago
- Cobalt Strike Field Manual - A quick reference for Windows commands that can be accessed in a beacon console.☆65Updated 8 years ago
- Gives context to a system. Uses EQGRP shadow broker leaked list to give some descriptions to processes.☆48Updated 8 years ago
- Powershell script which will take any payload and put it in the a bat script which delivers the payload. The payload is delivered using e…☆56Updated last year
- Discover MSSQL Instances via UDP Scanning☆25Updated 7 years ago
- A PowerShell script to prevent Sysmon from writing its events☆16Updated 5 years ago
- ☆18Updated 6 years ago
- Ingests logs/dbs from cobalt and empire and outputs an excel report with activity, sessions, and credentials☆21Updated 5 years ago
- Helper script for mangling CS payloads☆51Updated 6 years ago
- ☆17Updated 6 years ago
- Walking the PEB in VBA☆24Updated 5 years ago
- Source code in Win32 ASM and C for a shellcode execution wrapper designed to mitigate the risk of shellcode execution on a host other tha…☆19Updated 9 years ago
- Vampire is an aggressor script which integrates with BloodHound to mark nodes as owned.☆79Updated 4 years ago
- Cobalt Strike cna script for randomized argument spoofing☆51Updated 6 years ago
- BloodHound Cypher Queries Ported to a Jupyter Notebook☆53Updated 5 years ago
- Everything related to Cobalt Strike☆15Updated 5 years ago
- Code for blogpost: https://outflank.nl/blog/2018/10/25/building-resilient-c2-infrastructues-using-dns-over-https/☆54Updated 7 years ago