tpmiller87 / mal_gen

A Bash script that automates the creation of a Cobalt Strike Malleable Profile.
5 stars 1 forks source link

question #1

Closed sec13b closed 4 months ago

sec13b commented 4 months ago

about x86_prepend_bytes can you tell more ?

and about : set tasks_max_size "1048576"; set tasks_proxy_max_size "921600";

[03/15 11:45:50] beacon> upload /home/kali/Desktop/okok/anydesk.exe (C:\Users\buildserver\Downloads\work\anydesk.exe) [03/15 11:45:57] [] Tasked beacon to upload /home/kali/Desktop/okok/amd64.exe as C:\Users\buildserver\Downloads\work\anydesk.exe [03/15 11:46:02] [+] host called home, sent: 786489 bytes [03/15 11:46:03] [+] host called home, sent: 780459 bytes [03/15 11:46:05] [+] host called home, sent: 1040612 bytes [03/15 11:46:07] [!] Unable to add task of 260153 bytes as it is over the available size of 7964 bytes. 1 task(s) on hold until next checkin. [03/15 11:46:07] [+] host called home, sent: 1040612 bytes [03/15 11:46:08] [!] Unable to add task of 260153 bytes as it is over the available size of 7964 bytes. 2 task(s) on hold until next checkin. [03/15 11:46:08] [+] host called home, sent: 1040612 bytes [03/15 11:46:09] [] Tasked beacon to list files in C:\Users\buildserver\Downloads\work\ (from File Browser) [03/15 11:46:09] [!] Unable to add task of 260153 bytes as it is over the available size of 7964 bytes. 3 task(s) on hold until next checkin. [03/15 11:46:09] [+] host called home, sent: 1040612 bytes [03/15 11:46:11] [+] host called home, sent: 264871 bytes

tpmiller87 commented 4 months ago

Prepend bytes: https://whiteknightlabs.com/2023/05/23/unleashing-the-unseen-harnessing-the-power-of-cobalt-strike-profiles-for-edr-evasion/

Tasks size: https://hstechdocs.helpsystems.com/manuals/cobaltstrike/current/userguide/content/topics/malleable-c2_profile-language.htm

sec13b commented 4 months ago

ok