base on not a reverse-engineered version of the Cobalt Strike Beacon # Cobalt Strike Beacon ------ I should add that this is a code that is still in its infancy and cannot be used out of the box. More people are welcome to make corrections and additions to it. Technology shouldn’t be closed, right? ------ ## Overview This is a project I have saved on my computer, I just didn't think I should keep it private since I can no longer find it anywhere on the internet. This project aims to provide a fully functional, from-scratch alternative to the Cobalt Strike Beacon, providing transparency and flexibility to security professionals and enthusiasts. This project is not a reverse-engineered version of the Cobalt Strike Beacon, but a complete open source implementation. The "settings.h" file contains macros for the C2 configuration file and the user should complete it to their liking. Once you have your "settings.h" template ready, feel free to share and contribute. PS. explain something.I don’t remember who deleted it after it was made public, but I read this project and I think it can help many people who are trying to reconstruct Beacon. ## Prerequisites - Visual Studio: The project is built using Visual Studio, not Visual Studio Code. - [libtommath](https://github.com/libtom/libtommath): A fast, portable number-theoretic multiple-precision integer library. - [libtomcrypt](https://github.com/libtom/libtomcrypt): A modular and portable cryptographic toolkit. ## Getting Started 1. Clone the repository 2. Open the project in Visual Studio. 3. Ensure that the required dependencies (libtommath, libtomcrypt) are properly configured and linked with the project. 4. Build the project. 5. Create your `settings.h` file based on the provided template. Make sure to include your C2 Profile macros and configurations. 6. Build the project again to apply your custom settings. 7. Execute the compiled binary. ------ You need to build your own settings.h, which contains these ~ 🥲lovelorn day ``` S_C2_VERB_POST S_PROXY_USER S_PROXY_CONFIG S_MAX_RETRY_STRATEGY_INCREASE S_TCP_FRAME_HEADER S_HOST_HEADER S_PROCINJ_TRANSFORM_X86 S_SMB_FRAME_HEADER S_C2_RECOVER S_SPAWNTO_X64 S_PROXY_BEHAVIOR S_PROCINJ_PERMS_I S_HEADERS_REMOVE S_PROXY_PASSWORD S_PROCINJ_MINALLOC S_PROCINJ_ALLOCATOR S_MAX_RETRY_STRATEGY_ATTEMPTS S_KILLDATE S_C2_REQUEST S_C2_POSTREQ S_PROCINJ_PERMS S_PROTOCOL S_PUBKEY S_PROCINJ_TRANSFORM_X64 S_DOMAIN_STRATEGY S_SPAWNTO_X86 S_EXIT_FUNK S_PROCINJ_EXECUTE S_CFG_CAUTION S_MAX_RETRY_STRATEGY_DURATION ``` ", Assign "at most 3 tags" to the expected json: {"id":"9069","tags":[]} "only from the tags list I provide: [{"id":77,"name":"3d"},{"id":89,"name":"agent"},{"id":17,"name":"ai"},{"id":54,"name":"algorithm"},{"id":24,"name":"api"},{"id":44,"name":"authentication"},{"id":3,"name":"aws"},{"id":27,"name":"backend"},{"id":60,"name":"benchmark"},{"id":72,"name":"best-practices"},{"id":39,"name":"bitcoin"},{"id":37,"name":"blockchain"},{"id":1,"name":"blog"},{"id":45,"name":"bundler"},{"id":58,"name":"cache"},{"id":21,"name":"chat"},{"id":49,"name":"cicd"},{"id":4,"name":"cli"},{"id":64,"name":"cloud-native"},{"id":48,"name":"cms"},{"id":61,"name":"compiler"},{"id":68,"name":"containerization"},{"id":92,"name":"crm"},{"id":34,"name":"data"},{"id":47,"name":"database"},{"id":8,"name":"declarative-gui "},{"id":9,"name":"deploy-tool"},{"id":53,"name":"desktop-app"},{"id":6,"name":"dev-exp-lib"},{"id":59,"name":"dev-tool"},{"id":13,"name":"ecommerce"},{"id":26,"name":"editor"},{"id":66,"name":"emulator"},{"id":62,"name":"filesystem"},{"id":80,"name":"finance"},{"id":15,"name":"firmware"},{"id":73,"name":"for-fun"},{"id":2,"name":"framework"},{"id":11,"name":"frontend"},{"id":22,"name":"game"},{"id":81,"name":"game-engine "},{"id":23,"name":"graphql"},{"id":84,"name":"gui"},{"id":91,"name":"http"},{"id":5,"name":"http-client"},{"id":51,"name":"iac"},{"id":30,"name":"ide"},{"id":78,"name":"iot"},{"id":40,"name":"json"},{"id":83,"name":"julian"},{"id":38,"name":"k8s"},{"id":31,"name":"language"},{"id":10,"name":"learning-resource"},{"id":33,"name":"lib"},{"id":41,"name":"linter"},{"id":28,"name":"lms"},{"id":16,"name":"logging"},{"id":76,"name":"low-code"},{"id":90,"name":"message-queue"},{"id":42,"name":"mobile-app"},{"id":18,"name":"monitoring"},{"id":36,"name":"networking"},{"id":7,"name":"node-version"},{"id":55,"name":"nosql"},{"id":57,"name":"observability"},{"id":46,"name":"orm"},{"id":52,"name":"os"},{"id":14,"name":"parser"},{"id":74,"name":"react"},{"id":82,"name":"real-time"},{"id":56,"name":"robot"},{"id":65,"name":"runtime"},{"id":32,"name":"sdk"},{"id":71,"name":"search"},{"id":63,"name":"secrets"},{"id":25,"name":"security"},{"id":85,"name":"server"},{"id":86,"name":"serverless"},{"id":70,"name":"storage"},{"id":75,"name":"system-design"},{"id":79,"name":"terminal"},{"id":29,"name":"testing"},{"id":12,"name":"ui"},{"id":50,"name":"ux"},{"id":88,"name":"video"},{"id":20,"name":"web-app"},{"id":35,"name":"web-server"},{"id":43,"name":"webassembly"},{"id":69,"name":"workflow"},{"id":87,"name":"yaml"}]" returns me the "expected json"