SourcePoint is a polymorphic C2 profile generator for Cobalt Strike C2s, written in Go. SourcePoint allows unique C2 profiles to be generated on the fly that helps reduce our Indicators of Compromise ("IoCs") and allows the operator to spin up complex profiles with minimal effort. This was done…
C2concealer is a command line tool that generates randomized C2 malleable profiles for use in Cobalt Strike.
AzureC2Relay is an Azure Function that validates and relays Cobalt Strike beacon traffic by verifying the incoming requests based on a Cobalt Strike Malleable C2 profile. Any incoming requests that do not share the profiles user-agent, URI paths, headers, and query parameters, will be redirected…
Skyhook is a REST-driven utility used to smuggle files into and out of networks defended by IDS implementations. It comes with a pre-packaged web client that uses a blend of React, vanilla JS, and web assembly to manage file transfers.
(previously known as proxy2's malleableredirector_ plugin)
Las características principales de mgeeky/redwarden son: C2 Infrastructure, Staging and Infrastructure, Cobalt Strike Extensions.
Las alternativas de código abierto para mgeeky/redwarden incluyen: tylous/sourcepoint — SourcePoint is a polymorphic C2 profile generator for Cobalt Strike C2s, written in Go. SourcePoint allows unique C2… fortynorthsecurity/c2concealer — C2concealer is a command line tool that generates randomized C2 malleable profiles for use in Cobalt Strike. flangvik/cobaltbus — Cobalt Strike External C2 Integration With Azure Servicebus, C2 traffic via Azure Servicebus. 0xzdh/redirect.rules — Redirect Rules Generation Tool. flangvik/azurec2relay — AzureC2Relay is an Azure Function that validates and relays Cobalt Strike beacon traffic by verifying the incoming… blackhillsinfosec/skyhook — Skyhook is a REST-driven utility used to smuggle files into and out of networks defended by IDS implementations. It…