Discover @CodeXTF2 Open Source projects

CodeX (@CodeXTF2)

CodeXTF2

Stars
1,615
Global Rank 19,185 (Top 0.7 %)
Followers 414
Following 44
Registered over 7 years ago
Most used languages

Python
52.9 %

C++
11.8 %

C
11.8 %

Shell
5.9 %

YARA 5.9 %

PowerShell
5.9 %

C#
5.9 %
Location 🇺🇸 United States
Country Total Rank 6,878
Country Ranking

YARA 26

C
572

PowerShell
2,183

Python
2,498

C++
3,853

C#
7,299

Burp2Malleable

Quick python utility I wrote to turn HTTP requests from burp suite into Cobalt Strike Malleable C2 profiles

ScreenshotBOF

An alternative screenshot capability for Cobalt Strike that uses WinAPI and does not perform a fork & run. Screenshot downloaded in memory.

WindowSpy

WindowSpy is a Cobalt Strike Beacon Object File meant for automated and targeted user surveillance.

maldev-links

My collection of malware dev links

cobaltstrike-headless

Aggressorscript that turns the headless aggressor client into a (mostly) functional cobalt strike client.

HavocNotion

A simple ExternalC2 POC for Havoc C2. Communicates over Notion using a custom python agent, handler and extc2 channel. Not operationally safe or stable, built as a PoC to showcase Havoc C2's modular C2 channel interface.

PyHmmm

Simple PoC Python agent to showcase Havoc C2's custom agent interface. Not operationally safe or stable. Released with accompanying blog post as a tutorial sample

BusySleepBeacon

This is a simple project made to evade https://github.com/thefLink/Hunt-Sleeping-Beacons by using a busy wait instead of beacon's built in Sleep() call. Most of the structure e.g. Sleep hook, shellcode exec etc. are taken from mgeeky's https://github.com/mgeeky/ShellcodeFluctuation.

evasion-adventures-files

Slides and POC demo for my talk at Divizion Zero on EDR evasion titled "Evasion Adventures"

CobaltStrikeSoundBoard

cobaltstrike-sleepmask-yara

Just a git repo for the sleepmask detection rule i found in https://codex-7.gitbook.io/codexs-terminal-window/blue-team/detecting-cobalt-strike/sleep-mask-kit-iocs

SharpAwareness

Light and more OPSEC friendly way for red teamers to gain quick situational awareness of both the host and the user.

beacon_notify_discordhook

Probably the easiest way to setup new beacon notifications in Cobalt Strike

goautodial-rce-exploit

Pops a shell on a goautodial server

codexs-useful-utils

Misc utils I made here and there, collected in one place

CodeXTF2

my-bashrc

Simulated-User

CodeXTF2.github.io

James-Server-RCE

Improved version of the james server RCE. Spawns a reverse shell that can bypass rbash ;)

qtscrcpy_keymap_editor