cobbr/Covenant

Features

• Command and Control Frameworks - A command and control platform for red team operations that manages remote agents and executes tasks using the .NET ecosystem.
• Dynamic Binary Generation - Compiles and obfuscates source code on the fly to generate unique, non-static executable payloads.
• Command and Control Platforms - Serves as a centralized .NET platform for managing remote agents and executing commands during security assessments.
• Adversary Simulation - Provides a multi-user environment for coordinating adversary simulations and tracking operational indicators.
• Software Implant Systems - Generates obfuscated payloads and manages the lifecycle and communication profiles of remote agents.
• Agent-Based Task Queuing - Uses an agent-based queuing system where tasks are stored on the server and executed upon agent check-in.
• Launcher Generation - Creates binaries, scripts, or one-liners using system executors to deploy and initialize remote agents.
• Implant Lifecycle Management - Controls the behavior, polling intervals, and tasking of remote agents to maintain persistence.
• C2 Communication Configuration - Allows precise management of polling intervals, jitter, and retry limits to tune agent-to-server contact behavior.
• C2 Communication Protocols - Implements custom secure communication protocols for command and control between the server and remote agents.
• C2 Listener Profiling - Provides listener profiles to customize the appearance and behavior of communications between agents and the server.
• Traffic Masking Scripts - Configures HTTP headers and URLs to mask command-and-control traffic and blend it with legitimate network activity.
• Payload Obfuscation Transformations - Implements custom transformation and inversion logic to obscure network payloads and evade detection.
• Traffic Obfuscation Pipelines - Applies custom inversion and transformation logic to network traffic to obscure payloads and blend with legitimate traffic.
• Collaborative Security Operations - Offers web and API interfaces for coordinating collaborative red team activities and joint security operations.
• Agent-Server Key Exchanges - Implements encrypted key exchanges during the initial handshake to ensure forward secrecy between agents and the server.
• Malleable C2 Traffic Profiles - Customizes network profiles and HTTP headers to hide C2 communications within legitimate network traffic.
• Remote Code Execution Tools - Provides tools to execute arbitrary code snippets directly on remote implants for immediate task performance.
• Remote Access Payloads - Generates and obfuscates dynamic .NET binaries to establish persistent remote access to target hosts.
• Secure Network Communication - Implements SSL certificate validation and pinning to secure network communication between the server and remote agents.
• Encrypted Communication Channels - Ensures forward secrecy through encrypted key exchanges and SSL implementations for agent-to-server communication.
• Remote Task Management Interfaces - Provides a centralized control panel for assigning operational tasks to remote agents and monitoring progress.
• Credential Collection - Provides automatic parsing and manual entry of passwords, hashes, and tickets from task output.
• Communication Parameters - Provides tools to modify connection delays, jitter, and expiration dates to alter how agents communicate.
• Post-Exploitation and Lateral Movement - Hosts listeners and manages the retrieval of credentials and files from compromised target systems.
• Operational Task Coordination - Provides coordination tools for multiple users to manage joint operational tasks within a single server instance.
• Tool Integration Plug-ins - Provides a plug-in extension model to compile custom functions into executable modules for remote execution.
• Remote Task Execution Modules - Bundles reference assemblies and source libraries to create custom executable modules for remote task execution.
• Callback Configurations - Provides network endpoint configurations and certificates for payloads to establish callbacks to the server.
• Protocol Translation Bridges - Employs protocol translation bridges to route communication between remote agents and the server using custom protocols.
• Remote File Downloads - Implements the capability to download files from remote hosts and store them locally for retrieval.
• Collaborative State Synchronization - Synchronizes a shared operational environment and command history across multiple authenticated operators in real time.
• Protocol Bridges - Implements protocol bridges that route agent traffic through external components to translate custom communication protocols.
• Listener Certificate Injection - Allows the injection of custom SSL certificates into network listeners to authenticate and encrypt incoming agent connections.
• Engagement Data Tracking - Records specific actions and artifacts throughout an engagement for deconfliction and reporting.
• C2 Communication Profiles - Defines data formatting, transformation, and messenger code requirements for specific communication bridges.
• Payload Hosting - Serves generated launchers from specified URLs to facilitate remote delivery to target systems.
• Command History Trackers - Maintains a searchable record of all tasks assigned to agents and their resulting output for forensic review.
• Operational Footprint Tracking - Provides tracking of compromised systems, active listeners, and uploaded files to monitor the operational footprint.
• Status Monitors - Provides real-time tracking of active agents and retrieves detailed system and user information from hosts.
• Command and Control - .NET-based command and control framework.
• Command And Control Frameworks - Collaborative .NET-based framework for remote system control and task execution.
• Execution and Persistence - Command and control framework built on .NET.
• Exploitation Frameworks - Command and control framework for .NET environments.
• Offensive Security - Collaborative .NET command and control framework for red teaming.
• Offensive Security Tools - Collaborative .NET command and control framework.

Star history