Chisel-Strike

KO | EN

gitlite — search

#ai #typescript #go #golang #machine-learning #rust #docker #macos #nodejs #awesome #awesome-list #vue #pytorch #security

(★ 461)

A .NET XOR encrypted cobalt strike aggressor implementation for chisel to utilize faster proxy and advanced socks5 capabilities.

파일 탐색기

최종 버전 다운로드 (.zip)

- chisel64
- chisel64.exe
- chisel86
- chisel86.exe
- SharpChisel-NG.exe
- SharpChisel.exe
- SharpChisel.xor
- job-pid.log
- teamserver.log
- nls-mod.cs
- SharpChisel-src.zip
- SharpXOR.cs
- banner.txt
- jobs.bat
- jobs.sh
- nls-mod.exe
- SharpXOR.exe
- SharpXORNIX.exe
- tmskill.bat
- tmskill.sh
ChiselStrike.cna
chiselstrike.gif
LICENSE.md
README.md

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Chisel-Strike

A .NET XOR encrypted cobalt strike aggressor implementation for chisel to utilize faster proxy and advanced socks5 capabilities.

## Why write this?

In my experience I found socks4/socks4a proxies quite slow in comparison to its socks5 counterparts and a lack of implementation of socks5 in most C2 frameworks. There is a C# wrapper around the go version of chisel called SharpChisel. This wrapper has a few [issues](https://github.com/shantanu561993/SharpChisel/issues/1) and isn't maintained to the latest version of it's go counterpart. SharpChisel didn’t produce compatible shellcode with donut, reflection methods or `execute-assembly`. A fix for this has been found using the SharpChisel-NG project: https://github.com/latortuga71/SharpChisel-NG.

Since the SharpChisel-NG assembly is around `16.7 MB`, `execute-assembly`(has a hidden size limitation of `1 MB`) and similar in memory methods wouldn’t work. To maintain most of the execution in memory, the NetLoader project is incorporated and executed via `execute-assembly` to reflectively host and load a XOR encrypted version of SharpChisel-NG with base64 arguments in memory.

As an alternative, it is also possible to implement similar C# proxies like SharpSocks by replacing the appropriate chisel binaries in the project.

## Setup

_Note: If using a Windows teamserver skip steps 2 and 3._

1. Clone / download the repository: `git clone https://github.com/m3rcer/Chisel-Strike.git`

2. Make all binaries executable:

- `cd Chisel-Strike`

- `chmod +x -R chisel-modules` 
  
  - `chmod +x -R tools`

3. Install `Mingw-w64` and `mono`:

- `sudo apt-get install mingw-w64`
  
  - `sudo apt install mono-complete`

4. Import `ChiselStrike.cna` in cobalt strike using the `Script Manager`

_Recompile and replace updated binaries from the `src` folder if needed._

## Usage

chisel can be executed on both the CS teamserver client (windows / linux) and the beacon. With either acting as the server / client. A normal execution flow would be to setup a chisel server on the CS teamserver and then create a client on the beacon to connect back to the teamserver.

### Commands

1. `chisel <client/server> <command>`: Run chisel on a beacon

2. `chisel-tms <client/server> <command>`: Run chisel on your CS teamserver

3. `chisel-enc`: XOR encrypt SharpChisel-NG with a password of choice

4. `chisel-jobs`: List active chisel jobs on the CS teamserver and beacon

5. `chisel-kill`: Kill active chisel jobs on a beacon

6. `chisel-tms-kill`: Kill active chisel jobs on your CS teamserver client

### Example

![Alt Text](https://raw.githubusercontent.com/m3rcer/Chisel-Strike/main/chiselstrike.gif)

## OPSEC

SharpChisel-NG drops a DLL on disk due to the use of `Costura / Fody` packages at a location similar to: `C:\Users\m3rcer\AppData\Local\Temp\Costura\CB9433C24E75EC539BF34CD1AA12B236\64\main.dll` which is detected by defender. It is advised to obfuscate and update chisel DLL's and SharpChisel-NG in the project.

## TODO

- Figure a way to avoid SharpChisel dropping main.dll on disk / create a new C# wrapper for chisel.

- Create a method to parse command output for the `chisel-tms` command.

## Credits

- [Flangvik](https://github.com/Flangvik) and [Arno0x](https://gist.github.com/Arno0x) for the [NetLoader](https://gist.github.com/Arno0x/2b223114a726be3c5e7a9cacd25053a2) project.

- [shantanu561993](https://github.com/shantanu561993) for the C# wrapper implementation of chisel: [SharpChisel](https://github.com/shantanu561993/SharpChisel)

- [latortuga71](https://github.com/latortuga71) for the `load-assembly` fix: [SharpChisel-NG](https://github.com/latortuga71/SharpChisel-NG)

Chisel-Strike

파일 탐색기

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Chisel-Strike

파일 탐색기

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README