-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathhost_recon.cna
More file actions
21 lines (21 loc) · 1.05 KB
/
host_recon.cna
File metadata and controls
21 lines (21 loc) · 1.05 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
# Cobalt Strike Host Recon Agressor Script
# TODO:
# Implement UAC level check
# Implement WMI checks
# Implement computer details check
# Implement AV finder
# Implement egress check
#
# Clipboard monitoring - https://github.com/EmpireProject/Empire/blob/master/lib/modules/powershell/collection/clipboard_monitor.py
#
# Packet capture - Windows - https://github.com/EmpireProject/Empire/blob/master/lib/modules/powershell/collection/packet_capture.py
#
# Dump Chrome contents - https://github.com/EmpireProject/Empire/blob/master/lib/modules/powershell/collection/ChromeDump.py
#
# Dump Firefox contents - https://github.com/EmpireProject/Empire/blob/master/lib/modules/powershell/collection/FoxDump.py
#
# Webcam record - https://github.com/EmpireProject/Empire/blob/master/lib/modules/powershell/collection/WebcamRecorder.py
#
# Browser history/bookmark search - https://github.com/EmpireProject/Empire/blob/master/lib/modules/powershell/collection/browser_data.py
#
# EDR Enumeration https://github.com/harleyQu1nn/AggressorScripts/blob/master/EDR.cna