
Cobalt-Strike-CheatSheet
Some notes and examples for cobalt strike's functionality
command-and-controlcurated-resourcesdata-exfiltration+8
1.1k

Some notes and examples for cobalt strike's functionality

Win32 and Kernel abusing techniques for pentesters

This is a keylogger that collects all the data and e-mail it in a set time with system information which includes device S/N and hardware specs,…

Windows kernel driver technique that hides kernel threads by abusing IoCancelIrp and IRP cancel routines, with detection methods for identifying…

exp for CVE-2019-0887

A tool uses the QoS Policy (Pacer.sys) to throttle Endpoint Detection and Response (EDR) agents from connecting to the server.