A collection of scripts for dealing with Cobalt Strike beacons in Python
☆168Jan 5, 2021Updated 5 years ago
Alternatives and similar repositories for pybeacon
Users that are interested in pybeacon are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Scan files or process memory for CobaltStrike beacons and parse their configuration☆917Aug 19, 2021Updated 5 years ago
- Execute .Net assemblies using Rundll32.exe☆115Mar 17, 2021Updated 5 years ago
- Splunk Dashboard for CobaltStrike logs☆90Mar 16, 2021Updated 5 years ago
- credential dump using foreshaw technique using SeTrustedCredmanAccessPrivilege☆125May 22, 2021Updated 5 years ago
- ☆1,133Dec 19, 2023Updated 2 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Toolset for research malware and Cobalt Strike beacons☆210Mar 11, 2025Updated last year
- ☆70Sep 17, 2020Updated 6 years ago
- Project to enumerate proxy configurations and generate shellcode from CobaltStrike☆137Nov 4, 2020Updated 5 years ago
- Collection of beacon BOF written to learn windows and cobaltstrike☆359Feb 24, 2023Updated 3 years ago
- Reflective DLL loading of your favorite Golang program☆173Jan 27, 2020Updated 6 years ago
- ☆359Apr 24, 2021Updated 5 years ago
- ☆450Aug 4, 2021Updated 5 years ago
- Outlook persistence using VSTO add-ins☆85Jan 9, 2021Updated 5 years ago
- Practice Go programming and implement CobaltStrike's Beacon in Go☆1,265Oct 2, 2020Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Executes position independent shellcode from an encrypted zip☆302Dec 22, 2020Updated 5 years ago
- .NET Project for Attacking vCenter☆559Nov 11, 2021Updated 4 years ago
- Source for tasks I have used with Covenant☆120Mar 21, 2021Updated 5 years ago
- PowerShell and Cobalt Strike scripts for lateral movement using Excel 4.0 / XLM macros via DCOM (direct shellcode injection in Excel.exe)☆325Mar 26, 2019Updated 7 years ago
- .NET 4.0 Scheduled Job Lateral Movement☆89Aug 25, 2020Updated 6 years ago
- An Ansible role for installing Cobalt Strike.☆81Jul 6, 2026Updated 3 months ago
- Spray a hash via smb to check for local administrator access☆143Feb 7, 2021Updated 5 years ago
- Example code for using named pipe output with beacon ReflectiveDLLs☆118Jun 24, 2020Updated 6 years ago
- Various Aggressor Scripts I've Created.☆150Jan 1, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- official repo for the AdHuntTool (part of the old RedTeamCSharpScripts repo)☆235Jun 10, 2022Updated 4 years ago
- AzureC2Relay is an Azure Function that validates and relays Cobalt Strike beacon traffic by verifying the incoming requests based on a Co…☆233Feb 15, 2021Updated 5 years ago
- ☆534Nov 20, 2021Updated 4 years ago
- Dumping SAM / SECURITY / SYSTEM registry hives with a Beacon Object File☆220Oct 8, 2020Updated 6 years ago
- Remove API hooks from a Beacon process.☆283Sep 18, 2021Updated 5 years ago
- Ps-Tools, an advanced process monitoring toolkit for offensive operations☆354Dec 1, 2020Updated 5 years ago
- Miscellaneous Tools☆270Oct 29, 2020Updated 6 years ago
- Cobalt Strike Beacon Object Files☆168May 2, 2022Updated 4 years ago
- Tool for interacting with outlook interop during red team engagements☆145Jun 29, 2021Updated 5 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- OfensivePipeline allows you to download and build C# tools, applying certain modifications in order to improve their evasion for Red Team…☆822Jun 5, 2026Updated 4 months ago
- This aggressor script uses a beacon's note field to indicate the health status of a beacon.☆143Sep 29, 2021Updated 5 years ago
- A framework for creating COM-based bypasses utilizing vulnerabilities in Microsoft's WDAPT sensors.☆296Aug 18, 2023Updated 3 years ago
- Joystick is a tool that gives you the ability to transform the ATT&CK Evaluations data into concise views that brings forward the nuances…☆66Sep 13, 2023Updated 3 years ago
- Using DInvoke to patch AMSI.dll in order to bypass AMSI detections triggered when loading .NET tradecraft via Assembly.Load().☆216Mar 5, 2020Updated 6 years ago
- My CobaltStrike BOFS☆166Jul 23, 2022Updated 4 years ago
- ☆170May 20, 2021Updated 5 years ago