rvrsh3ll/cplresourcerunner

Run shellcode from resource

CPLResourceRunner

Create Payload "RAW" fully-staged (S) (x86) in cobalt strike

Run ConvertShellcode.py on your beacon.bin file

Run the following command against the "shellcode.txt" file to get a blob for the cpl resource.

cat shellcode.txt |sed 's/[, ]//g; s/0x//g;' |tr -d '\n' |xxd -p -r |gzip -c |base64 -w 0 > b64shellcode.txt

Copy b64shellcode.txt contents into Resources.txt in this project.

Compile to x86 and copy CPLResourceRunner.dll to RunMe.cpl

Will launch with double click or whatever method you use to execute files.

For asthetics, change the contents of the MsgBox to suit your pretext or remove for lateral movement usage.

cplresourcerunner's Issues

СobaltStrike

Hi! Help me! I want to ask You to throw me СobaltStrike. I will be grateful!
my email: [email protected]

error compiling

hi when i try to build the project it gives me this error

Severity Code Description Project File Line Suppression State
Error The "RGiesecke.DllExport.MSBuild.DllExportAppDomainIsolatedTask" task could not be loaded from the assembly C:\Users\AlienGamer\Desktop\CPLResourceRunner-master\CPLResourceRunner\packages\UnmanagedExports.1.2.7\tools\RGiesecke.DllExport.MSBuild.dll. Could not load file or assembly 'Microsoft.Build.Utilities, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a' or one of its dependencies. The system cannot find the file specified. Confirm that the declaration is correct, that the assembly and all its dependencies are available, and that the task contains a public class that implements Microsoft.Build.Framework.ITask. CPLResourceRunner