Skip to content
A collection of Cortana scripts that you may use with Armitage and Cobalt Strike 2.x. Cortana Scripts are not compatible with Cobalt Strike 3.x. Cobalt Strike 3.x uses a variant of Cortana called Aggressor Script.
Java Ruby Python C Shell
Latest commit 9507eaf Oct 17, 2015 @rsmudge Merge pull request #39 from benyG/master
Beef weaponized browser extensions
Failed to load latest commit information.
QRcode Create qrcode.cna Feb 17, 2014
annoy Update annoy/annoy.cna Sep 25, 2012
autoDiscover Bug Fixes Sep 19, 2012
autoarp initial examples. Aug 1, 2012
autofind initial examples. Aug 1, 2012
autohack deleted: autohack/autohash.cna~ Sep 20, 2012
autoscan deleted: autohack/autohash.cna~ Sep 20, 2012
av-bypass-demo av bypass with cortana (demo) [to go with a blog post...] Nov 8, 2012
beacon Commit of beacon.cna, safetynet.cna, user_hunter.cna, and veil_evasio… Mar 12, 2014
beef_strike beef weaponized browser extensions & ARE builder Oct 17, 2015
binaries Shell Binary Priv Escalation Feb 21, 2013
botvoice BeEf & Armitage/CS integration to a next level Oct 1, 2014
differ initial examples. Aug 1, 2012
eval initial examples. Aug 1, 2012
events-table Events table added to display db.events Nov 1, 2012
icon initial examples. Aug 1, 2012
idlewatch add idlewatch script to watch user idle times Aug 11, 2012
import_creds Added import_creds script Nov 5, 2012
int128scripts Eliminated unused decoy code; Changed filenames Jan 21, 2014
irc-client initial examples. Aug 1, 2012
login_autopwn login_autopwn Aug 20, 2013
login_logout initial examples. Aug 1, 2012
multi-meterpreter initial examples. Aug 1, 2012
new_payload initial examples. Aug 1, 2012
post-play update readme.txt Sep 30, 2013
pt_autodoc cleaned up graphDB.conf a bit Nov 8, 2012
raven you probably want the binaries. Mar 3, 2013
rc_loader RC loader - quickly run resource file Mar 6, 2014
references initial examples. Aug 1, 2012
safetynet Commit of beacon.cna, safetynet.cna, user_hunter.cna, and veil_evasio… Mar 12, 2014
sniffer add a sniff.png image and make the polling period every minute. Aug 9, 2012
user_hunter Commit of beacon.cna, safetynet.cna, user_hunter.cna, and veil_evasio… Mar 12, 2014
veil_evasion Commit of beacon.cna, safetynet.cna, user_hunter.cna, and veil_evasio… Mar 12, 2014
vulns initial examples. Aug 1, 2012
vy_con Error Checking Jul 30, 2014
wce wce fun Sep 30, 2012
README.md Update README.md Aug 3, 2012
beef_strike.cna beef_strike Sep 7, 2013

README.md

Cortana Scripts

This repository is a collection of Cortana scripts available for your use. Cortana is a scripting language for Armitage and Cobalt Strike.

Click the Downloads link (top right) and download a ZIP or TGZ file with all of the files in this repository. Load what you like.

Tutorial

If you'd like to write your own Cortana scripts, take a look at the Cortana Tutorial. This tutorial also explains how to connect Cortana bots to a collaboration server.

Contribute

If you'd like to contribute, fork this repository, make your modifications, and submit a pull request. Each script should have its own folder with a .cna file, any resources, and optionally a readme.

Optionally, if you're not a git warrior, you may email your script contribution to contact at fastandeasyhacking dot com.

Mailing List

If you have a scripting question, ask it on the Cortana Hackers mailing list. To subscribe, simply send a message to cortana@librelist.com. The librelist.com server will discard the first message you send and subscribe you to the list. Send an email to cortana-unsubscribe@librelist.com to unsubscribe.

IRC

If you'd like to chat in real-time, please join #armitage on irc.freenode.net. The folks in the channel aren't active all the time. You may need to ask your question and wait for a response.

Bug Reports / Feature Requests

If you find a bug in a script, contact its author. If you find a bug in Cortana or have a feature request, file it in the Armitage Issue Tracker

Something went wrong with that request. Please try again.