Tylous / SourcePoint

SourcePoint is a C2 profile generator for Cobalt Strike command and control servers designed to ensure evasion.
1.01k stars 150 forks source link

Multiple custom profile fixes / features #9

Closed Xenov-X closed 2 years ago

Xenov-X commented 2 years ago

Sorry for the pull req with multiple changes - they're all focussed on the custom profile functionality

1. Customuri broken

Custom profile option did not utilise the parameter specified in the -Customuri argument. This was due to profile option 8 using:

baseuri = "//"

The correct base uri setting was in the unused profile 9. This has been copied over into profile 8 in commit a41fad8 , and now is:

baseuri = "" + customuri + ""

2. Added CustomuriGET and CustomuriPOST

Enabling specification of different customuri parameters for each of GET and POST, matching the functionality of the built in profiles. Commit #0ca7789

3. Removed requirement for valid SSL certificates when using custom profile

Saves the additional setup when team server is only contactable via a secure backplane from redirectors.

4. Readme housekeeping

Added guidance for CustomuriGET and CustomuriPOST. Minor corrections around profile numbers for custom profile, as some references to 7 as custom profile still remained.