Статья Hide your CobaltStrike like a PRO! & Bypass Kaspersky End Point Security AV/EDR (PART 2)

[r1z]

R1Z PLEASE CAN YOU SHARE ME YOUR R1Z.SH SCRIPT I WOULD LOVE TO LEARN, USE, AND BUILD ON IT.

Hi,
No, only paid service now.

 

[Borte]

For your information.
The file at link: https://anonfiles.com/N3kdH1idy9/CS_4.x_original_XSS_7z is no longer available.

 

[r1z]

For your information.
The file at link: https://anonfiles.com/N3kdH1idy9/CS_4.x_original_XSS_7z is no longer available.

Link updated, thanks.

 

[ski]

please reupload the link

 

[r1z]

please reupload the link

already uploaded, check topic.

Enjoy!

 

[Marcus52]

already uploaded, check topic.

Добавь ответом на это сообщение линк на софт пожалуйста.

 

[r1z]

please reupload the link

Done, Enjoy!

 

[BloodBear]

Hello r1z,

I'd like to ask a question, (sorry if it's a noob question)

Is this similar to the Artifact kit? just another alternative?
Am I able to get a copy of the HCS script or is it going through the source code as you shown and manually changing values?
I know when I want to get .Net past AV this is how I do it.

Thank you for all the time you put into this tutorial.
One thing i'm very interested in (im not even sure if this is how it works) is putting in copies of DLLs to get past hooks for EDRs.

Thanks again

 

[r1z]

Hello r1z,

I'd like to ask a question, (sorry if it's a noob question)

Is this similar to the Artifact kit? just another alternative?
Am I able to get a copy of the HCS script or is it going through the source code as you shown and manually changing values?
I know when I want to get .Net past AV this is how I do it.

Thank you for all the time you put into this tutorial.
One thing i'm very interested in (im not even sure if this is how it works) is putting in copies of DLLs to get past hooks for EDRs.

Thanks again

Hi,

• No it's not similar to Artifact kit's, but once you understand how to modify your beacon; you might understand how to modify and build your own artifact's kit.
• HCS is not for sale.

Your welcome,
Enjoy!