James Yeung

RDLL for Cobalt Strike beacon to silence sysmon process

ScriptIdiot

Cobalt strike CNA script to notify you via Discord whenever there is a new beacon.

ScriptIdiot

An all-in-one Cobalt Strike BOF to patch, check and revert AMSI and ETW for x64 process. Both syscalls and dynamic resolve versions are available.

ScriptIdiot

Code snippets to add on top of cobalt strike sleep mask to achieve patchless hook on AMSI and ETW

ScriptIdiot

Code snippets to add on top of cobalt strike sleepmask kit so that ekko can work in a CFG protected process

ScriptIdiot