Aggressor scripts for use with Cobalt Strike 3.0+
beacon_to_empire.cna - a script that leverages Powershell Empire's RESTful API to migrate sessions from a Beacon session on Cobalt Strike
CCDC - a collection of scripts designed for use at CCDC
- lulz.cna - includes some Blue Team annoyance functions: IE Popup (kiosk mode), Windows Alert (7+), Host Shutdown, Boo.exe (uploads/executes Boo), and Clippy popup (requires setup and Windows 7).
- misc.cna - includes functions to stomp the host file with a chosen text file or add an entry to the existing host file.
mimikatz-every-30m.cna - runs mimikatz's "logonpasswords" alias every thirty minutes
powershell.cna - adds context items for some common Powerup and Powerview functions. For this to work, you must put the PowerUp.ps1 and powerview.ps1 files in the same directory as this script
sleeptimer.cna - automatically sets sleep intervals based on time. (ie from 10p to 6a, sleep for 60s). Resets to 60s sleeps when the sleep interval ends.