admin/Sentinel-One-CobaltStrikeParser
1
0
Fork 0
mirror of https://github.com/Sentinel-One/CobaltStrikeParser synced 2026-06-21 13:45:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #14 from rxwx/master

Browse Source 
Update access type enum
This commit is contained in:
Kristal-g
2021-11-05 18:06:53 +02:00
committed by GitHub
parent 3ea26aa479 55e2cf9898
commit e518a97f2a
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
parse_beacon_config.py
+1 -1
View File
@@ -256,7 +256,7 @@ class packedSetting:
class BeaconSettings:
BEACON_TYPE = {0x0: "HTTP", 0x1: "Hybrid HTTP DNS", 0x2: "SMB", 0x4: "TCP", 0x8: "HTTPS", 0x10: "Bind TCP"}
ACCESS_TYPE = {0x1: "Use direct connection", 0x2: "Use IE settings", 0x4: "Use proxy server"}
ACCESS_TYPE = {0x0: "Use proxy server (manual)", 0x1: "Use direct connection", 0x2: "Use IE settings", 0x4: "Use proxy server (credentials)"}
EXECUTE_TYPE = {0x1: "CreateThread", 0x2: "SetThreadContext", 0x3: "CreateRemoteThread", 0x4: "RtlCreateUserThread", 0x5: "NtQueueApcThread", 0x6: None, 0x7: None, 0x8: "NtQueueApcThread-s"}
ALLOCATION_FUNCTIONS = {0: "VirtualAllocEx", 1: "NtMapViewOfSection"}
TSTEPS = {1: "append", 2: "prepend", 3: "base64", 4: "print", 5: "parameter", 6: "header", 7: "build", 8: "netbios", 9: "const_parameter", 10: "const_header", 11: "netbiosu", 12: "uri_append", 13: "base64url", 14: "strrep", 15: "mask", 16: "const_host_header"}