Cross C2

Cross C2 - Generator CobaltStrike's cross-platform beacon

     ▄████▄   ██▀███   ▒█████    ██████   ██████     ▄████▄   ██████▄ 
    ▒██▀ ▀█  ▓██ ▒ ██▒▒██▒  ██▒▒██    ▒ ▒██    ▒    ▒██▀ ▀█        ██░
    ▒▓█    ▄ ▓██ ░▄█ ▒▒██░  ██▒░ ▓██▄   ░ ▓██▄      ▒▓█        █████▒ 
    ▒▓▓▄ ▄██▒▒██▀▀█▄  ▒██   ██░  ▒   ██▒  ▒   ██▒   ▒▓▓▄ ▄█ ░▒██      
    ▒ ▓███▀ ░░██▓ ▒██▒░ ████▓▒░▒██████▒▒▒██████▒▒   ▒ ▓███▀  ░▒▓█████▓
    ░ ░▒ ▒  ░░ ▒▓ ░▒▓░░ ▒░▒░▒░ ▒ ▒▓▒ ▒ ░▒ ▒▓▒ ▒ ░   ░ ░▒ ▒    ░▒ ░▓ ░░
      ░  ▒     ░▒ ░ ▒░  ░ ▒ ▒░ ░ ░▒  ░ ░░ ░▒  ░ ░     ░  ▒     ░ ░░ ░ 
    ░          ░░   ░ ░ ░ ░ ▒  ░  ░  ░  ░  ░  ░     ░         by:░hook
    ░ ░         ░         ░ ░        ░        ░     ░ ░          ░    
    ░                                               ░

Description

Add beacon generation functions for CobaltStrike's cross-platform beacon. Currently only supported on Linux & MacOS.

	Linux	MacOS	iOS	Android	Embedded
Run Env (x86)	√
Run Env (x64)	√	√
gen beacon (x86)	√
gen beacon (x64)	√	√
gen beacon (armv7)			⍻	⍻
gen beacon (arm64)			⍻	⍻
gen beacon (mips[el])					⍻

Restricted description:

MacOS: Latest systems only support 64-bit programs
iOS: sandbox, restricted cmd
Embedded: only *nix
⍻ : Loader is still in progress

Install

Download:

CrossC2.cna
genCrossC2 CS Env

copy CrossC2.cna and genCrossC2 file to CobaltStrike's rootdir (Must be in the same directory )
choose Script Manager，add CrossC2.cna (If successfully installed, the menu bar will have an additional item CrossC2)
Modify the genCrossC2 path in the CrossC2.cna script to the real path

exec("/xxx/xxx/genCrossC2"... -> exec("/opt/cs/genCrossC2"...

Usage

teamserver

For some reasons, only HTTPS beacon is currently supported. When setting C2Profile, please add an '/ login' to the URI list configured by http-get, and add an '/ logout' to the http-post URI list. C2Profile dynamic analysis will be supported in the future

cna plugin way

Menu bar: CrossC2 -> CrossC2 Payload Generator -> genCrossC2

Can be configured in the pop-up dialog:
1. Operating System
2. Arach
3. Payload Type(Currently only supports Stageless, Staged is being updated)
4. Generate file save path

Run the underlying program directly

In addition to cna GUI generation, you can also directly call the underlying program to generate directly.

[usage]: genCrossC2 [host] [port] [getURI] [postURI] [platform] [arch] [outputFileName]


-platform		'MacOS' / 'Linux'
-arch    		'x86' / 'x64'

[ex]:
	genCrossC2 127.0.0.1 4444 null null MacOS x64 ./CrossC2-test

Coming soon

Rich C2Porfile support
Staged Type Shellcode Generation
http-proxy (auth) & socks proxy back connection support
Proxy-Pivots
node beacon? (Single node type, can host other beacon without relying on teamserver)

Examples

Bug

GUI file manager and process viewing functions are not currently supported
Uploading and downloading files that are too large may have incomplete end bytes

scanfsec / CrossC2