Extras + Plugins

C2 Malleable Profiles

GitHub - threatexpress/random_c2_profile: Cobalt Strike random C2 Profile generatorGitHub

GitHub - xx0hcd/Malleable-C2-Profiles: Cobalt Strike - Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike https://www.cobaltstrike.com/.GitHub

GitHub - byt3bl33d3r/pyMalleableC2: Python interpreter for Cobalt Strike Malleable C2 Profiles. Allows you to parse, build and modify them programmatically.GitHub

GitHub - Cobalt-Strike/sleep_python_bridge: This project is 'bridge' between the sleep and python language. It allows the control of a Cobalt Strike teamserver through python without the need for for the standard GUI client. NOTE: This project is very much in BETA. The goal is to provide a playground for testing and is in no way an officially support feature. Perhaps this could be something added in the future to the core product.GitHub

Aggressor Scripts

https://github.com/pandasec888/taowu-cobalt-strike/tree/englishgithub.com

GitHub - 0xthirteen/MoveKit: Cobalt Strike kit for Lateral MovementGitHub

GitHub - bitsadmin/fakelogonscreen: Fake Windows logon screen to steal passwordsGitHub

GitHub - sec-consult/aggrokatz: Aggrokatz is an aggressor plugin extension for Cobalt Strike which enables pypykatz to interface with the beacons remotely and allows it to parse LSASS dump files and registry hive files to extract credentials and other secrets stored without downloading the file and without uploading any suspicious code to the beacon.GitHub

GitHub - harleyQu1nn/AggressorScripts: Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sourcesGitHub

GitHub - zer0yu/Awesome-CobaltStrike: List of Awesome CobaltStrike ResourcesGitHub