Skip to content

Instantly share code, notes, and snippets.

@usualsuspect
usualsuspect / parse_instructions.py
Created Aug 15, 2020
Parser for Cobalt Strike's Malleable C2 config item
View parse_instructions.py
#!/usr/bin/env python3
# Cobalt Strike Malleable C2 instruction parser
import struct
import sys
def read_int(f):
data = f.read(4)
if not data:
return None
return struct.unpack(">I",data)[0]