admin/Octoberfest7-Secure_Stager
1
0
Fork 0
mirror of https://github.com/Octoberfest7/Secure_Stager synced 2026-06-06 16:24:32 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update README

Browse Source
This commit is contained in:
Octoberfest7
2024-10-21 13:45:00 -04:00
parent c6cfb5d2e4
commit 7fed02b6cf
2 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+5 -2
View File
@@ -16,7 +16,7 @@ Secure stager functionality within Cobalt Strike is particularly attractive beca
## Usage
Command Line Syntax: `./secure_stager.py </path/to/raw/file> <HTTPS url that stage will be hosted at>`.
Command Line Syntax: `./secure_stager.py </path/to/payload/stage.bin> <HTTPS url that stage will be hosted at>`.
Example: `./secure_stager.py /home/kali/beacon_x64.bin https://www.myhostingdomain.com/aboutus`.
@@ -24,11 +24,14 @@ After the python script completes, host the produced encrypted stage at the URL
## Notes
There are no AV/EDR evasion methods built into the stager; that is the job of your shellcode runner. After the stage has been downloaded and verified it will be executed in the same thread as the stager via function pointer.
1. There are no AV/EDR evasion methods built into the stager; that is the job of your shellcode runner.
2. After the stage has been downloaded and verified it will be executed in the same thread as the stager via function pointer.
3. The stager currently only supports HTTPS connections, so make sure you host the stage using SSL.
## Further work
1. Make stager proxy-aware.
2. Add customization options for request headers.
3. Implement alternate protocols to retrieve payload stage
## Credits
1. [@C5pider](https://x.com/C5pider) for Stardust
secure_stager.py
+1 -1
View File
@@ -22,7 +22,7 @@ def xor(binary_blob, key):
# Validate args
if len(sys.argv) < 3:
print("Usage: ./secure_stager.py </path/to/raw/file> <HTTPS url that stage will be hosted at>")
print("Usage: ./secure_stager.py </path/to/payload/stage.bin> <HTTPS url that stage will be hosted at>")
print("Example: ./secure_stager.py /home/kali/beacon_x64.bin https://www.myhostingdomain.com/aboutus")
sys.exit()