メニュー
Aggressor Script development for Cobalt Strike. Use when writing aggressor scripts, creating BOF loaders, building aliases, hooks, or automation for Cobalt Strike.
デフォルトでは、最初にソースを確認する Prompt が選択されています。直接コマンドに切り替えるか、ローカルコピーをダウンロードすることもできます。
インストールを決める前に、SKILL.md と SkillsMP に表示されている付属ファイルをお読みください。
SOC 職業分類に基づく
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
直接コマンドでは確認用 Prompt が省略されます。実行前にソースを確認してください。
npx skills add https://github.com/SpecterOps/skills --skill cobalt-strike-aggressor-developmentコマンドは1行のまま表示されます。コピー前に横へスクロールして全体を確認してください。
ローカルで確認しますか？SkillsMP が現在取得できるファイルをダウンロードできます。
SKILL.md を表示中
| name | cobalt-strike-aggressor-development |
| description | Aggressor Script development for Cobalt Strike. Use when writing aggressor scripts, creating BOF loaders, building aliases, hooks, or automation for Cobalt Strike. |
| metadata | {"author":"GhostWorks"} |
Use this skill when developing Aggressor Scripts for Cobalt Strike:
Do not use this skill unless Aggressor Script development is requested, or BOF development is being completed and an aggressor script is required to load and execute the BOF.
Aggressor Script is the scripting language built into Cobalt Strike, version 3.0, and later. Aggressor Script allows you to modify and extend the Cobalt Strike client.
Aggressor Script is the spiritual successor to Cortana, the open source scripting engine in Armitage. It is a scripting language for red team operations and adversary simulations inspired by scriptable IRC clients and bots. Its purpose is two-fold: you may create long running bots that simulate virtual red team members, hacking side-by-side with you, and you may use it to extend and modify the Cobalt Strike client to your needs.
Aggressor Script builds on Raphael Mudge's Sleep Scripting Language. Aggressor Script will do anything that Sleep can do.
Use when writing Outflank C2 Python BOF wrappers for OC2 V2 (*_bof.s1.py, BaseBOFTask, outflank_stage1, stage1) or V3 (oc2_sdk_python, @command, manifest.json, command provider), when porting/migrating/converting a V2 BOF script to a V3 application, or when passing an existing @artifacts/ catalog file.
Performs security review of arbitrary Go packages, including libraries, frameworks, CLIs, HTTP and gRPC services, and backend applications. Covers authentication and authorization, request parsing, SSRF, SQL and command injection, templates and filesystems, crypto/session handling, concurrency, and unsafe/cgo edges.
Develop Outflank C2 event-driven Python bots. Use when creating or debugging OC2 automations.