fox-it/dissect.cobaltstrike issues and pull requests

#71 - Add support for SETTING_HTTP_DATA_REQUIRED beacon setting

Pull Request - State: closed - Opened by yunzheng 29 days ago - 1 comment

#70 - More pip install quotations in the docs

Pull Request - State: closed - Opened by yunzheng 30 days ago - 1 comment

#69 - Update pip install docs with quoting when installing extras

Pull Request - State: closed - Opened by yunzheng 30 days ago - 1 comment

#68 - Add support for SETTING_DATA_STORE_SIZE and SETTING_BEACON_GATE options

Pull Request - State: closed - Opened by yunzheng 30 days ago - 1 comment

#67 - Output bof_reuse_memory and bof_allocator in c2profile

Pull Request - State: closed - Opened by yunzheng 30 days ago - 1 comment

#66 - Add version detection for Cobalt Strike 4.9 and 4.10

Pull Request - State: closed - Opened by yunzheng 30 days ago - 1 comment

#65 - Speed up beacon file reading from zip files in tests

Pull Request - State: closed - Opened by yunzheng about 1 month ago - 1 comment

#64 - Fix BeaconSetting names with unknown values

Pull Request - State: closed - Opened by yunzheng about 1 month ago - 1 comment

#62 - Switch GitHub workflow to dissect-ci.yml

Pull Request - State: closed - Opened by yunzheng about 1 month ago - 1 comment

#61 - Migrate setuptools to full pyproject.toml only

Pull Request - State: closed - Opened by yunzheng about 1 month ago - 1 comment

#60 - Update pre-commit checks to latest versions

Pull Request - State: closed - Opened by yunzheng about 1 month ago - 1 comment

#59 - Update GitHub Actions to use latest versions

Pull Request - State: closed - Opened by yunzheng about 1 month ago - 1 comment

#58 - Update minimal Python requirement to 3.9

Pull Request - State: closed - Opened by yunzheng about 1 month ago - 3 comments

#57 - Pin sphinx_rtd_theme>=2.0 to fix readthedocs

Pull Request - State: closed - Opened by yunzheng about 1 month ago

#56 - Compatibility with cstruct v4

Pull Request - State: closed - Opened by yunzheng about 2 months ago

#54 - Pin dissect.cstruct < 4.0 for now

Pull Request - State: closed - Opened by yunzheng about 2 months ago

#53 - Compatibility with dissect.struct 4.x

Issue - State: closed - Opened by yunzheng 4 months ago - 6 comments

#52 - How to install beacon-pcap?

Issue - State: closed - Opened by polosec 7 months ago - 2 comments

#51 - Fix `tox -e build` by pinning Python version

Pull Request - State: closed - Opened by yunzheng 10 months ago - 1 comment

#50 - Switch to `ruff` linter

Pull Request - State: closed - Opened by yunzheng over 1 year ago - 1 comment

#49 - Speed up finding non standard beacon XOR keys

Pull Request - State: closed - Opened by yunzheng over 1 year ago - 1 comment

#48 - Updates to C2 and Client Code to better handle certain beacon configs

Pull Request - State: closed - Opened by drb-ra over 1 year ago - 2 comments

#47 - Improve support for Cobalt Strike v4.7 and v4.8

Pull Request - State: closed - Opened by yunzheng over 1 year ago - 1 comment

#46 - Print beacon version information when running `beacon-dump -v`

Pull Request - State: closed - Opened by yunzheng over 1 year ago - 1 comment

#45 - Decode SETTING_DOMAINS using latin-1 instead of ascii codec

Pull Request - State: closed - Opened by yunzheng over 1 year ago - 1 comment

#44 - Add Cobalt Strike 4.8 version detection

Pull Request - State: closed - Opened by yunzheng over 1 year ago - 1 comment

#43 - Update git repo for flake8

Pull Request - State: closed - Opened by yunzheng almost 2 years ago - 1 comment

#42 - Merge main back into furo-theme branch

Pull Request - State: closed - Opened by yunzheng about 2 years ago

#41 - Add `codespell` to `.pre-commit-config.yaml` and fixed typos

Pull Request - State: closed - Opened by yunzheng about 2 years ago - 1 comment

#39 - Improved docs and tutorials

Pull Request - State: closed - Opened by yunzheng about 2 years ago - 1 comment

#38 - Add message for trial beacons

Pull Request - State: closed - Opened by yunzheng about 2 years ago - 1 comment

#37 - Move `scripts/artifact.py` to it's own `beacon-artifact` CLI tool

Pull Request - State: closed - Opened by yunzheng about 2 years ago - 1 comment

#36 - Don't use hardcoded strings for type names

Pull Request - State: closed - Opened by yunzheng about 2 years ago - 1 comment

#35 - Add test_client.py for testing `dissect.cobaltstrike.client`

Pull Request - State: closed - Opened by yunzheng about 2 years ago - 1 comment

#34 - Ignore COMMAND_NOOP packets

Pull Request - State: closed - Opened by yunzheng about 2 years ago

#33 - Httpx req params

Pull Request - State: closed - Opened by yunzheng about 2 years ago

#32 - Fix --arch and --barch arguments not being parsed

Pull Request - State: closed - Opened by yunzheng about 2 years ago

#31 - Add specific message for `flow.record` ImportError

Pull Request - State: closed - Opened by yunzheng about 2 years ago

#30 - Improve documentation

Pull Request - State: closed - Opened by yunzheng about 2 years ago

#29 - Fix readthedocs

Pull Request - State: closed - Opened by yunzheng about 2 years ago

#28 - Get rid of docs/requirements.txt and use pip method for readthedocs

Pull Request - State: closed - Opened by yunzheng about 2 years ago

#27 - Get rid of docs/requirements.txt and use pip method for readthedocs

Pull Request - State: closed - Opened by yunzheng about 2 years ago

#26 - Fix building docs

Pull Request - State: closed - Opened by yunzheng about 2 years ago

#25 - Add support for beacon client and decrypting traffic from PCAP files

Pull Request - State: closed - Opened by yunzheng about 2 years ago

#24 - Add PE export stamps for Cobalt Strike 4.7 and 4.7.1

Pull Request - State: closed - Opened by yunzheng about 2 years ago

#23 - Add `netbios_encode` and `netbios_decode` functions to utils.py

Pull Request - State: closed - Opened by yunzheng about 2 years ago

#22 - Add `BeaconConfig.public_key` property

Pull Request - State: closed - Opened by yunzheng about 2 years ago

#21 - Add retain_file_offset helper to utils.py

Pull Request - State: closed - Opened by yunzheng about 2 years ago

#20 - Add task_* c2profile settings that were introduced in Cobalt Strike 4.6

Pull Request - State: closed - Opened by yunzheng about 2 years ago

#19 - Add Cobalt Strike 4.7 settings and version info

Pull Request - State: closed - Opened by yunzheng about 2 years ago

#18 - Fixed missing DNS beacon settings in c2profile output (#17)

Pull Request - State: closed - Opened by yunzheng about 2 years ago

#17 - DNS settings are missing in c2profile output for DNS beacons

Issue - State: closed - Opened by yunzheng about 2 years ago - 1 comment

#16 - Added pe_export_stamp for CS 4.6 DNS Beacon

Pull Request - State: closed - Opened by yunzheng over 2 years ago

#15 - Add u64, p64, u64be and p64be packing aliases

Pull Request - State: closed - Opened by yunzheng over 2 years ago

#14 - Fix small typo in docs

Pull Request - State: closed - Opened by yunzheng over 2 years ago

#13 - Add PE export timestamps for Cobalt Strike 4.6

Pull Request - State: closed - Opened by yunzheng over 2 years ago

#12 - Update README.rst

Pull Request - State: closed - Opened by yunzheng over 2 years ago

#11 - Add tests for `dissect.cobaltstrike.beacon` main function

Pull Request - State: closed - Opened by yunzheng over 2 years ago

#10 - Refactor `pytest.raises` statements to use `match` keyword

Pull Request - State: closed - Opened by yunzheng over 2 years ago

#9 - Add process exit code to beacon-dump

Pull Request - State: closed - Opened by yunzheng over 2 years ago

#8 - Apply black --check and --diff options via .pre-commit-config.yaml only

Pull Request - State: closed - Opened by yunzheng over 2 years ago

#7 - Refactor OSError exception handling in @catch_sigpipe decorator

Pull Request - State: closed - Opened by yunzheng over 2 years ago

#6 - Determine Sphinx docs version from `dissect.cobaltstrike._version`

Pull Request - State: closed - Opened by yunzheng over 2 years ago

#5 - Improved handling for empty or all zero xorkey buffer in utils.xor

Pull Request - State: closed - Opened by yunzheng over 2 years ago

#4 - Add support for reading from stdin to beacon-dump

Pull Request - State: closed - Opened by yunzheng over 2 years ago

#3 - Unbreak black by updating it to 22.3.0

Pull Request - State: closed - Opened by yunzheng over 2 years ago

#2 - Fixed exception handling in @catch_sigpipe

Pull Request - State: closed - Opened by yunzheng over 2 years ago

#1 - Also run unit tests on pypy3

Pull Request - State: closed - Opened by yunzheng over 2 years ago

GitHub / fox-it/dissect.cobaltstrike issues and pull requests