A beacon generator using Cobalt Strike and a variety of tools.

Last update: Dec 17, 2022

Related tags

Overview

Beaconator

Beaconator is an aggressor script for Cobalt Strike used to generate either staged or stageless shellcode and packing the generated shellcode using your tool of choice.

Currently, it supports the following tools:

Staged Beacon Generator

Alaris

Stageless Beacon Generator

How to Use

Beaconator

Load the beaconator.cna file via Cobalt Strike > Script Manager.
Access Beaconator from the menu bar by clicking the Generate Beacon menu.

Staged Beacon Generator

Alaris

Clone the repo.

git clone https://github.com/cribdragg3r/Alaris.git

Open beaconator.cna and change the value of the $ALARIS_DIR variable and point it to where Alaris is located.

Stageless Beacon Generator

PEzor

Install PEzor using the following:

git clone https://github.com/phra/PEzor.git
cd PEzor
./install.sh

Add PEzor's $PATH variable in your ~/.profile or ~/.bashrc (if using Bash), OR ~/.zprofile or ~/.zshrc (if using ZSH).

ScareCrow

Install the dependencies.

sudo apt update -y && sudo apt install -y openssl osslsigncode mingw-w64
go get github.com/fatih/color
go get github.com/yeka/zip
go get github.com/josephspurrier/goversioninfo

Clone the repo and build ScareCrow.

git clone https://github.com/optiv/ScareCrow.git
cd ScareCrow
go build ScareCrow.go

Open beaconator.cna and change the value of the $SCARECROW_DIR variable and point it to where ScareCrow is located.

Screenshots

Beaconator

Alaris

PEzor

ScareCrow

Credits

@JFaust_ for developing Alaris.
@phraaaaaaa for developing PEzor.
@Tyl0us for developing ScareCrow.

Comments

null value error - Not fixed

The issue is not fixed by creating the folder output. See below:

Executing: PEzor.sh -64 -unhook -antidebug -shellcode -format=exe /home/simon.davies/Cobalt_Strike_Aggressor_Scripts/Beaconator/output/shellcode.bin[10:31:56] null value error at beaconator.cna:140
bug

opened by Simon-Davies 4
options persist after payload creation

If I create a payload with an option like -unhook and -x64. It will correctly create the payload. However if I then create a payload with just -x64 and -sgn, the script console says Executing: PEzor.sh -64 -unhook -sgn -shellcode -format=exe. It is keeping the old option of -unhook when not selected(the only option I have seen that does not persist to the next generation attempt is -32). I have to reload the script after every payload generation in order to get the correct options again.
bug

opened by foehammer762 3
Null error

The shellcode is being correctly generated but not the binary/dll in the directoty ../output/pezor/shellcode.bin.

[*] Executing: PEzor -64 -unhook -antidebug -shellcode -format=dll /opt/tools/Beaconator/output/pezor/shellcode.bin[18:17:32] null value error at beaconator.cna:248

FYI : The command is working fine when I run it manually in a terminal.

opened by TH3xACE 2
null value error

When I try to create a payload using beaconater i get the folllowing error: null value error at beaconator.cna:140

I can then copy paste the whole command from the script console to the terminal and that works properly. I already installed pezor and updated the PATH variable.
Once I manually created the subfolder output and hard coded the full path to pezor, It is now creating the shellcode.bin file in the output folder but not creating the final payload even though it says Success beacon can be found at path/to/cna/output
bug

opened by foehammer762 2
Not sure if Bug??

null value error at beaconator.cna:243

Tried with x86 and x64 using PEZor. With and without Syscalls in case that made any difference.

Line 243 reads:

closef($process);

opened by 4r33d0m 1
Fixed output folder issue and fixed issue with options persisting to subsequent payload generations

Added folder "output" and added .gitignore to ignore the generated payloads but keep the folder. This fixes the null value error. Added code to reset the options back to null so that you don't have to reload the cna script after every payload generation.

opened by foehammer762 0

Releases(2.0)

2.0(Aug 10, 2021)
Added Alaris for generating staged shellcode

Added ScareCrow for generating stageless shellcode

Created a helper script for ScareCrow

Categorized selection as Staged or Stageless

Added tool output subfolders

Source code(tar.gz)
Source code(zip)
1.1(Jul 23, 2021)
Fixed error check with the use of x86 arch & syscalls

Fixed the "null value error" due to missing output folder

Fixed issue with options persisting to subsequent payload generations

Added PEzor's BOF format

Added the -cleanup option for BOFs

Added the -sleep option

Added more error checks

Cleaned up the code

Source code(tar.gz)
Source code(zip)
1.0(Jul 19, 2021)

Source code(tar.gz)
Source code(zip)

Owner

Capt. Meelo

Infosec Noob

GitHub Repository

A male and female dog names python package

3 Dec 12, 2021

Plugin to generate BOM + CPL files for JLCPCB

KiCAD JLCPCB tools Plugin to generate all files necessary for JLCPCB board fabrication and assembly Gerber files Excellon files BOM file CPL file Furt

566 Dec 29, 2022

Palestra sobre desenvolvimento seguro de imagens e containers para a DockerCon 2021 sala Brasil

Segurança de imagens e containers direto na pipeline Palestra sobre desenvolvimento seguro de imagens e containers para a DockerCon 2021 sala Brasil.

10 May 19, 2022

Monitoring of lake dynamics

slamcore_utils Description This repo contains the slamcore-setup-dataset script. It can be used for installing a sample dataset for offline testing an

10 Jun 23, 2022

frida-based ceserver. iOS analysis is possible with Cheat Engine.

frida-ceserver frida-based ceserver. iOS analysis is possible with Cheat Engine. Original by Dark Byte. Usage Install frida on iOS. python main.py Cyd

89 Jan 08, 2023

Usos Semester average helper

Usos Semester average helper Dzieki temu skryptowi mozesz sprawdzic srednia ocen na kazdy odbyty przez ciebie semestr PARAMETERS required: '--username

2 Jan 17, 2022

Run Windows Applications on Linux as if they are native, Use linux applications to launch files files located in windows vm without needing to install applications on vm. With easy to use configuration GUI

Run Windows Applications on Linux as if they are native, Use linux applications to launch files files located in windows vm without needing to install applications on vm. With easy to use configurati

2k Jan 02, 2023

A feed generator. Currently supports generating RSS feeds from Google, Bing, and Yahoo news.

0 Dec 13, 2021

Script Repository for the ICGM-CNRS FRANCE

Here you will find my Python Work repesitory for the ICGM institute - Montpellier - France.

1 Apr 13, 2022

A simple armature retargeting tool for Blender

Simple-Retarget-Tool-Blender A simple armature retargeting tool for Blender Update V2: Set Rest Pose to easily apply rest pose. Preset Import/Export.

74 Jan 04, 2023

Module for working with the site dnevnik.ru with python

dnevnikru Module for working with the site dnevnik.ru with python Dnevnik object accepts login and password from the dnevnik.ru account Methods: homew

21 Nov 21, 2022

E5 自动续期

请选择跳转新版本系统 (2021-2-9采用)：以后更新都在AutoApi，采用v0.0版本号覆盖式更新 AutoApi ：最新版保留1到2个稳定的简易版，防止萌新大范围报错 AutoApi'X' ：稳定版1 ( 即本版AutpApiP ) AutoApiP ( 即v5.0，稳定版 ) —

95 Feb 15, 2021

A toy repo illustrating a minimal installable Python package

MyToy: a minimal Python package This repository contains a minimal, toy Python package with a few files as illustration for students of how to lay out

19 Apr 24, 2022

Create N Share is a No Code solution which gives users the ability to create any type of feature rich survey forms with ease.

create n share Note : The Project Scaffold will be pushed soon. Create N Share is a No Code solution which gives users the ability to create any type

11 Dec 03, 2022

A beacon generator using Cobalt Strike and a variety of tools.

Related tags

Overview

Beaconator

How to Use

Beaconator

Staged Beacon Generator

Alaris

Stageless Beacon Generator

PEzor

ScareCrow

Screenshots

Beaconator

Alaris

PEzor

ScareCrow

Credits

Comments

null value error - Not fixed

options persist after payload creation

Null error

null value error

Not sure if Bug??

Fixed output folder issue and fixed issue with options persisting to subsequent payload generations

Releases(2.0)

2.0(Aug 10, 2021)

1.1(Jul 23, 2021)

1.0(Jul 19, 2021)

Owner

Capt. Meelo

A male and female dog names python package

Plugin to generate BOM + CPL files for JLCPCB

Palestra sobre desenvolvimento seguro de imagens e containers para a DockerCon 2021 sala Brasil

Monitoring of lake dynamics

frida-based ceserver. iOS analysis is possible with Cheat Engine.

Usos Semester average helper

Run Windows Applications on Linux as if they are native, Use linux applications to launch files files located in windows vm without needing to install applications on vm. With easy to use configuration GUI

A feed generator. Currently supports generating RSS feeds from Google, Bing, and Yahoo news.

Script Repository for the ICGM-CNRS FRANCE

A simple armature retargeting tool for Blender

Module for working with the site dnevnik.ru with python

E5 自动续期

A toy repo illustrating a minimal installable Python package

Create N Share is a No Code solution which gives users the ability to create any type of feature rich survey forms with ease.

A web project to control the daily life budget planing

Windows symbol tables for Volatility 3

Tool that adds githuh profile views to ur acc

Python with braces. Because Python is awesome, but whitespace is awful.

BOHB tune library template (included example)

Statistics Calculator module for all types of Stats calculations.