dissect.cobaltstrike 1.2.1.dev7__tar.gz → 1.2.1.dev8__tar.gz
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/PKG-INFO +1 -1
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/dissect/cobaltstrike/_version.py +2 -2
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/tools/beacon-client.rst +1 -1
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/tools/beacon-pcap.rst +1 -1
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/.github/workflows/dissect-ci.yml +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/.gitignore +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/.lfs-assets-id +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/.pre-commit-config.yaml +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/.readthedocs.yml +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/LICENSE +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/README.rst +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/codecov.yml +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/dissect/cobaltstrike/__init__.py +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/dissect/cobaltstrike/artifact.py +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/dissect/cobaltstrike/beacon.py +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/dissect/cobaltstrike/c2.py +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/dissect/cobaltstrike/c2profile.lark +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/dissect/cobaltstrike/c2profile.py +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/dissect/cobaltstrike/c_c2.py +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/dissect/cobaltstrike/client.py +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/dissect/cobaltstrike/pcap.py +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/dissect/cobaltstrike/pe.py +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/dissect/cobaltstrike/utils.py +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/dissect/cobaltstrike/version.py +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/dissect/cobaltstrike/xordecode.py +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/Makefile +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/c2profile-grammar.rst +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/codespell-ignore-words.txt +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/conf.py +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/examples.rst +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/images/beacon-client.png +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/images/teamserver-echoclient.png +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/images/teamserver_ls.png +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/images/vt-cobaltstrike-43-zip.png +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/index.rst +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/installation.rst +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/license.rst +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/scripts/checksum8-accesslogs.rst +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/scripts/dump_beacon_keys.rst +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/scripts/example_client.rst +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/scripts/index.rst +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/structures/c2_def.rst +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/structures/cs_def.rst +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/structures/index.rst +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/structures/pe_def.rst +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/tools/beacon-artifact.rst +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/tools/beacon-dump.rst +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/tools/beacon-xordecode.rst +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/tools/c2profile-dump.rst +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/tutorials/decrypt_cobaltstrike_pcaps.rst +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/tutorials/index.rst +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/tutorials/minimal_beacon_client.rst +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/pyproject.toml +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/scripts/checksum8-accesslogs.py +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/scripts/dump_beacon_keys.py +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/scripts/example_client.py +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/tests/conftest.py +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/tests/test_beacon.py +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/tests/test_c2.py +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/tests/test_c2profile.py +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/tests/test_client.py +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/tests/test_pe.py +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/tests/test_utils.py +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/tests/test_version.py +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/tests/test_xordecode.py +0 -0
- {dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/tox.ini +0 -0
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
Metadata-Version: 2.3
|
|
2
2
|
Name: dissect.cobaltstrike
|
|
3
|
-
Version: 1.2.1.
|
|
3
|
+
Version: 1.2.1.dev8
|
|
4
4
|
Summary: a Python library for dissecting Cobalt Strike related data
|
|
5
5
|
Project-URL: Homepage, https://github.com/fox-it/dissect.cobaltstrike
|
|
6
6
|
Project-URL: Documentation, https://dissect-cobaltstrike.readthedocs.io/
|
{dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/dissect/cobaltstrike/_version.py
RENAMED
|
@@ -12,5 +12,5 @@ __version__: str
|
|
|
12
12
|
__version_tuple__: VERSION_TUPLE
|
|
13
13
|
version_tuple: VERSION_TUPLE
|
|
14
14
|
|
|
15
|
-
__version__ = version = '1.2.1.
|
|
16
|
-
__version_tuple__ = version_tuple = (1, 2, 1, '
|
|
15
|
+
__version__ = version = '1.2.1.dev8'
|
|
16
|
+
__version_tuple__ = version_tuple = (1, 2, 1, 'dev8')
|
{dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/tools/beacon-client.rst
RENAMED
|
@@ -25,7 +25,7 @@ To ensure you have all the dependencies for ``beacon-client`` you can use the fo
|
|
|
25
25
|
|
|
26
26
|
.. code-block:: bash
|
|
27
27
|
|
|
28
|
-
$ pip install -e dissect.cobaltstrike[c2]
|
|
28
|
+
$ pip install -e 'dissect.cobaltstrike[c2]'
|
|
29
29
|
|
|
30
30
|
Here is an example usage of connecting to a Team Server with custom Beacon metadata, we choose a fixed beacon id so we
|
|
31
31
|
can connect to it again later without creating a new beacon session at the Team Server:
|
{dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/tools/beacon-pcap.rst
RENAMED
|
@@ -18,7 +18,7 @@ To ensure you have all the dependencies for ``beacon-pcap`` you can use the foll
|
|
|
18
18
|
|
|
19
19
|
.. code-block:: bash
|
|
20
20
|
|
|
21
|
-
$ pip install -e dissect.cobaltstrike[pcap]
|
|
21
|
+
$ pip install -e 'dissect.cobaltstrike[pcap]'
|
|
22
22
|
|
|
23
23
|
Example usage for if you have the RSA private key:
|
|
24
24
|
|
{dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/.github/workflows/dissect-ci.yml
RENAMED
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
{dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/dissect/cobaltstrike/__init__.py
RENAMED
|
File without changes
|
{dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/dissect/cobaltstrike/artifact.py
RENAMED
|
File without changes
|
{dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/dissect/cobaltstrike/beacon.py
RENAMED
|
File without changes
|
{dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/dissect/cobaltstrike/c2.py
RENAMED
|
File without changes
|
|
File without changes
|
|
File without changes
|
{dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/dissect/cobaltstrike/c_c2.py
RENAMED
|
File without changes
|
{dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/dissect/cobaltstrike/client.py
RENAMED
|
File without changes
|
{dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/dissect/cobaltstrike/pcap.py
RENAMED
|
File without changes
|
{dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/dissect/cobaltstrike/pe.py
RENAMED
|
File without changes
|
{dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/dissect/cobaltstrike/utils.py
RENAMED
|
File without changes
|
{dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/dissect/cobaltstrike/version.py
RENAMED
|
File without changes
|
|
File without changes
|
|
File without changes
|
{dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/c2profile-grammar.rst
RENAMED
|
File without changes
|
{dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/codespell-ignore-words.txt
RENAMED
|
File without changes
|
|
File without changes
|
|
File without changes
|
{dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/images/beacon-client.png
RENAMED
|
File without changes
|
|
File without changes
|
{dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/images/teamserver_ls.png
RENAMED
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
{dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/scripts/example_client.rst
RENAMED
|
File without changes
|
|
File without changes
|
{dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/structures/c2_def.rst
RENAMED
|
File without changes
|
{dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/structures/cs_def.rst
RENAMED
|
File without changes
|
{dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/structures/index.rst
RENAMED
|
File without changes
|
{dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/structures/pe_def.rst
RENAMED
|
File without changes
|
{dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/tools/beacon-artifact.rst
RENAMED
|
File without changes
|
{dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/tools/beacon-dump.rst
RENAMED
|
File without changes
|
{dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/tools/beacon-xordecode.rst
RENAMED
|
File without changes
|
{dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/tools/c2profile-dump.rst
RENAMED
|
File without changes
|
|
File without changes
|
{dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/docs/tutorials/index.rst
RENAMED
|
File without changes
|
|
File without changes
|
|
File without changes
|
{dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/scripts/checksum8-accesslogs.py
RENAMED
|
File without changes
|
{dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/scripts/dump_beacon_keys.py
RENAMED
|
File without changes
|
{dissect_cobaltstrike-1.2.1.dev7 → dissect_cobaltstrike-1.2.1.dev8}/scripts/example_client.py
RENAMED
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|