Carcosa
Updated Carcosa Should be on the gold image. If you'd like to be sure it's the most up-to-date version of Carcosa
please cd into the Carcosa folder and type git clone
*** IMPORTANT *** Ensure that the Certificates that you are going to use are in the correct location in the Cobalt Strike Folder
/home/cpt/cobaltstrike/certs
type sudo python3 Carcosa.py to run
Select one of the available profile options for SSL Certificate Injection
Profiles are stored within the profiles folder Carcosa/Profiles
- amazon: emulates web traffic to amazon (operational)
- office365_calendar: emulates web traffic to an office 365 calendar (non-operational)
- reddit: emulates web traffic to reddit (operational)
- slack: emulates web traffic to a slack chat room (non-operational)
- youtube: emulates web traffic to youtube (non-operational)
- zoom: emulates web traffic for a zoom call (operational)
You may now utilize the profile you selected as your Cobalt Strike Profile. It will be placed in /home/cpt/cobaltstrike/httpsProfile