Skip to content
View CodeXTF2's full-sized avatar
🤖
beep boop, I am a robot
🤖
beep boop, I am a robot
566 followers · 45 following

Achievements

Achievement: Pull Sharkx2Achievement: Starstruckx2Achievement: Quickdraw

Achievements

Achievement: Pull Sharkx2Achievement: Starstruckx2Achievement: Quickdraw

Block or report CodeXTF2

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don't include any personal information such as legal names or email addresses. Markdown supported. This note will be visible to only you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
CodeXTF2/README.md

root@codex🖥️# whoami

Bargain Bin Red Teamer

I specialize in developing offensive tools - red team implants/droppers, C2 infrastructure, and general offensive research. I occasionally clean up and publish the scripts and tools I create here.

🛠️ terrible code written by me

Webcam Beacon Object File Notion C2 Channel SharpAwareness
Headless Cobalt Strike Client Custom Havoc Agent Example Beacon Discord Notifications
HuntSleepingBeacons Evasion Screenshot Beacon Object File WindowSpy Beacon Object File
Burp2Malleable Custom C2 Channel Template OpenMalleableC2
Cobaltstrike BOFLoader

🔗 funny words

I document my offensive research in my free time on GitBook:

📖 Check out my GitBook

🎓 funny paper

Because I need to actually get a job one day 😭

My Certifications
Yes I am a slightly degenerate paper hoarder

Pinned Loading

  1. WebcamBOF WebcamBOF Public

    Webcam capture capability for Cobalt Strike as a BOF, with in-memory download options

    C 157 14

  2. Burp2Malleable Burp2Malleable Public

    Quick python utility I wrote to turn HTTP requests from burp suite into Cobalt Strike Malleable C2 profiles

    Python 418 35

  3. WindowSpy WindowSpy Public

    WindowSpy is a Cobalt Strike Beacon Object File meant for automated and targeted user surveillance.

    C 281 41

  4. ScreenshotBOF ScreenshotBOF Public

    An alternative screenshot capability for Cobalt Strike that uses WinAPI and does not perform a fork & run. Screenshot downloaded in memory.

    C 490 68

  5. maldev-links maldev-links Public

    My collection of malware dev links

    Python 308 35

  6. CustomC2ChannelTemplate CustomC2ChannelTemplate Public

    template for developing custom C2 channels for Cobalt Strike using IAT hooks applied by a reflective loader.

    C 101 18