search

Tylous / SourcePoint

SourcePoint is a C2 profile generator for Cobalt Strike command and control servers designed to ensure evasion.
1.01k stars 150 forks source link

escape characters in the magic_mz_x64 #23

Closed superuser5 closed 9 months ago

superuser5 commented 9 months ago

when i generate new profile, it uses escape character '\' for the magic_mz_x64 that causes c2lint errors. I can regenerate or change it manually and works fine, no big deal.

error:

[-] Error(s) while compiling /opt/my.profile
Error: unknown escape \A at line 58
       A\AT
         ^
[-] exiting because of errors in /opt/my.profile. Use ./c2lint to check the file

string in my profile:

set magic_mz_x64 "A\AT";
Tylous commented 9 months ago

odd it should be double \ to be accepted. Ill take a look at it and back to you.

Tylous commented 9 months ago

Just pushed a fix for this.

superuser5 commented 9 months ago

thank you, i tested and it fixed the issue.