Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

RTT· red team

RTT · red team

Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

Search techniques, tools, commands…⌘K

No scenario

No scenario · all techniques in scope

IdleStatus

0Scenarios

Advanced Search Keywords:

opsec:low - Show techniques with low noise level (stealthy)
phase:"initial access" - Filter by phase (use quotes for spaces)
category:lateral - Filter by category
platform:windows - Filter by platform
tag:credential - Find items with specific tag in results
external:true - Show only external techniques

Combining Keywords:

tag:stealth phase:"initial access" password

Searches for "password" within low-noise techniques in the initial access phase

Back to Tools

cs2webconfig

Port Redirection & Proxy

Resource Development

Python script that reads a Cobalt Strike Malleable C2 profile and generates an IIS web.config containing URL Rewrite rules. Matching profile URI and User-Agent requests are rewritten to an HTTPS teamserver URL; unmatched non-static requests are rewritten to /index.html, while the template excludes its listed static extensions. This is a configuration generator, not an IIS proxy deployment tool. The repository documents a separate applicationHost.xdt prerequisite for enabling IIS proxying. In the current source, -r is accepted as a redirector address but is not used in the generated configuration.

Source

https://github.com/bashexplode/cs2webconfig

Language

Python

References

github.com github.com github.com github.com github.com

+2 more

Extended Details

RESTRICTED_ACCESS_BLUR_MARKER