▄████▄ ██▀███ ▒█████ ██████ ██████ ▄████▄ ██████▄
▒██▀ ▀█ ▓██ ▒ ██▒▒██▒ ██▒▒██ ▒ ▒██ ▒ ▒██▀ ▀█ ██░
▒▓█ ▄ ▓██ ░▄█ ▒▒██░ ██▒░ ▓██▄ ░ ▓██▄ ▒▓█ █████▒
▒▓▓▄ ▄██▒▒██▀▀█▄ ▒██ ██░ ▒ ██▒ ▒ ██▒ ▒▓▓▄ ▄█ ░▒██
▒ ▓███▀ ░░██▓ ▒██▒░ ████▓▒░▒██████▒▒▒██████▒▒ ▒ ▓███▀ ░▒▓█████▓
░ ░▒ ▒ ░░ ▒▓ ░▒▓░░ ▒░▒░▒░ ▒ ▒▓▒ ▒ ░▒ ▒▓▒ ▒ ░ ░ ░▒ ▒ ░▒ ░▓ ░░
░ ▒ ░▒ ░ ▒░ ░ ▒ ▒░ ░ ░▒ ░ ░░ ░▒ ░ ░ ░ ▒ ░ ░░ ░
░ ░░ ░ ░ ░ ░ ▒ ░ ░ ░ ░ ░ ░ ░ by:░hook
░ ░ ░ ░ ░ ░ ░ ░ ░ ░
░ ░
Add beacon generation functions for CobaltStrike's cross-platform beacon. Currently only supported on Linux & MacOS.
Windows | Linux | MacOS | iOS | Android | Embedded | |
---|---|---|---|---|---|---|
Run Env (x86) | √ | |||||
Run Env (x64) | √ | √ | ||||
gen beacon (x86) | √ | |||||
gen beacon (x64) | √ | √ | ||||
gen beacon (armv7) | ⍻ | ⍻ | ||||
gen beacon (arm64) | ⍻ | ⍻ | ||||
gen beacon (mips[el]) | ⍻ |
Restricted description:
- Linux: For particularly old systems, you can choose "Linux-GLIBC" option in cna (around 2010)
- MacOS: Latest systems only support 64-bit programs
- iOS: sandbox, restricted cmd
- Embedded: only *nix
- ⍻ : Loader is still in progress
Download:
- CrossC2.cna
- genCrossC2
CS Env
- copy CrossC2.cna and genCrossC2 file to
CobaltStrike
's rootdir (Must be in the same directory ) - choose
Script Manager
,addCrossC2.cna
(If successfully installed, the menu bar will have an additional itemCrossC2
) - Modify the
genCrossC2
path in theCrossC2.cna
script to the real path
exec("/xxx/xxx/genCrossC2"... -> exec("/opt/cs/genCrossC2"...
For some reasons, only HTTPS beacon is currently supported.
C2Profile dynamic analysis will be supported in the future
Copy .cobaltstrike.beacon_keys
from the cs directory on the server to the local cs directory.
Menu bar: CrossC2 -> CrossC2 Payload Generator -> genCrossC2
Can be configured in the pop-up dialog:
1. Operating System
2. Arach
3. Payload Type(Currently only supports Stageless, Staged is being updated)
4. Generate file save path
In addition to cna GUI generation, you can also directly call the underlying program to generate directly.
[usage]: genCrossC2 [host] [port] [getURI] [postURI] [platform] [arch] [outputFileName]
-platform 'MacOS' / 'Linux'
-arch 'x86' / 'x64'
[ex]:
genCrossC2 127.0.0.1 4444 null null MacOS x64 ./CrossC2-test
- Rich C2Profile support
- Staged Type Shellcode Generation
- http-proxy (auth) & socks proxy back connection support
- Proxy-Pivots
- node beacon? (Single node type, can host other beacon without relying on teamserver)
- Support Linux & MacOS beacon generation.
md5(genCrossC2.Linux) = f4c0cc85c7cdd096d2b7febedc037538
md5(genCrossC2.MacOS) = 79fff0505092fc2055824ed1289ce8f9
- -fix genCrossC2.Linux crash.
- -fix uploading large file error.
- +support GUI file manager.
md5(genCrossC2.Linux) = 8256374d88c2149efc102aff7e90b3f9
md5(genCrossC2.MacOS) = 08fce0a5d964a091d8bf2344d7ab809e
- +support Compatibility with older versions of GLIBC on older systems Linux (around 2010).
- -change Multi-threaded background when shell commands are executed
- -change Redirect error output to standard output when shell command is executed.
- +support Add background file download function.
md5(genCrossC2.Linux) = b2e34f721ec2543b6625e33c8c2935df
md5(genCrossC2.MacOS) = 4e38a9d9a3eeff309648afc02e2e7664