| name | cobalt-strike-aggressor-development |
| description | Aggressor Script development for Cobalt Strike. Use when writing aggressor scripts, creating BOF loaders, building aliases, hooks, or automation for Cobalt Strike. |
| metadata | {"author":"GhostWorks"} |
Aggressor Development Skill
When to Use
Use this skill when developing Aggressor Scripts for Cobalt Strike:
- Writing new aggressor scripts for automation
- Creating BOF loader scripts
- Building aliases, hooks, or popup menus
- Looking up Sleep language syntax
- Referencing Aggressor function signatures
When NOT to Use
Do not use this skill unless Aggressor Script development is requested, or BOF development is being completed and an aggressor script is required to load and execute the BOF.
Aggressor Overview
Aggressor Script is the scripting language built into Cobalt Strike, version 3.0, and later. Aggressor Script allows you to modify and extend the Cobalt Strike client.
Aggressor Script is the spiritual successor to Cortana, the open source scripting engine in Armitage. It is a scripting language for red team operations and adversary simulations inspired by scriptable IRC clients and bots. Its purpose is two-fold: you may create long running bots that simulate virtual red team members, hacking side-by-side with you, and you may use it to extend and modify the Cobalt Strike client to your needs.
Aggressor Script builds on Raphael Mudge's Sleep Scripting Language. Aggressor Script will do anything that Sleep can do.
References
- BOF - An introduction to developing aggressor scripts for BOFs
- Sleep - An introduction to the Sleep programming language
- Aggressor - A reference to the Aggressor language
