Crate covert_client

Helper utilities for creating external c2 systems for cobaltstrike.

Structs

Implant

handle to a running cobalt strike implant. use create implant from buf to create and instance of this struct

Traits

CSFrameRead

Read a single cobaltstrike frame from from a readable. A cobalt strike frame is a 32le size followed by a buffer of that size.

CSFrameWrite

Write a single cobaltstrike frame to a writeable. writes a 32le size and then the buffer provided.

Functions

create_implant_from_buf

Allocates memory and executes cobalt strike shell code and establishes a connection to it over a named pipe. The returned implant can then be communicated with via read frame and write frame. Use covert_server to establish a connection to a c2 server and get the shell code for a new instance. ensure that when getting shell code from the c2 server that the pipe name and architecture match.