Skip to content

Standardize format for yamls that have BOF repo links #2

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
gkramer-SO wants to merge 8 commits into
base: main
Choose a base branch
from
Open

Standardize format for yamls that have BOF repo links #2

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
8 commits
Select commit Hold shift + click to select a range
7f6f24e
Update yaml to standardize BOF repo links
gkramer-SO Aug 12, 2025
b6ac4b1
Update yaml to standardize BOF repo links
gkramer-SO Aug 12, 2025
f5199d1
Update yaml to standardize BOF repo links
gkramer-SO Aug 12, 2025
53db660
Update yaml to standardize BOF repo links
gkramer-SO Aug 12, 2025
2739811
Update yaml to standardize BOF repo links
gkramer-SO Aug 12, 2025
b44e097
Update LOW_ProcessRecon_Apollo.yaml
gkramer-SO Aug 12, 2025
0ab025d
Update yaml to standardize BOF repo links
gkramer-SO Aug 12, 2025
48d6143
Update MEDIUM_CredentialPreperation_Apollo.yaml
gkramer-SO Aug 12, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 3 additions & 2 deletions Apollo/HIGH_ClipboardMonitor_Apollo.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ keywords:
- apollo_callback
environment: {}

# uses a forked GetClipboard BOF from https://github.com/atomiczsec/BOF_Collection/tree/master/Collection/Clipboard
# Repository: https://github.com/atomiczsec/BOF_Collection/tree/master/Collection/Clipboard

steps:
- name: "GetClipboard"
Expand All @@ -23,4 +23,5 @@ steps:
"coff_name": "GetClipboard.o",
"function": "go",
"serialized_arguments": "00000000"
}

}
5 changes: 3 additions & 2 deletions Apollo/HIGH_NanoRobeus_Apollo.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ keywords:
- apollo_callback
environment: {}

#uses: https://github.com/sliverarmory/armory/
# Repository: https://github.com/wavvs/nanorobeus

steps:

Expand All @@ -25,4 +25,5 @@ steps:
"coff_arguments": [["z","dump"],["z","/all"],["z",""],["z",""],["z",""]],
"serialized_arguments": "00000000"
}'
command_name: execute_coff

command_name: execute_coff
2 changes: 1 addition & 1 deletion Apollo/LOW_BasicRecon_Apollo.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ keywords:
- apollo_callback
environment: {}

#uses: https://github.com/trustedsec/CS-Situational-Awareness-BOF
# Repository: https://github.com/trustedsec/CS-Situational-Awareness-BOF

steps:
- name: "NetworkConnections"
Expand Down
5 changes: 2 additions & 3 deletions Apollo/LOW_DomainEnumeration_Apollo.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,8 +8,7 @@ keywords:
- apollo_callback
environment: {}

# uses: https://github.com/trustedsec/CS-Situational-Awareness-BOF, and listwamaccounts BOF from: https://github.com/Tw1sm/list-wam-accounts

# Repository: https://github.com/trustedsec/CS-Situational-Awareness-BOF, https://github.com/Tw1sm/list-wam-accounts

steps:
- name: "Current Domain Context"
Expand Down Expand Up @@ -134,4 +133,4 @@ steps:
"coff_name": "listwamaccounts.x64.o",
"function_name": "go"
}'
command_name: execute_coff
command_name: execute_coff
5 changes: 3 additions & 2 deletions Apollo/LOW_NetworkPassive_Apollo.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ keywords:
- apollo_callback
environment: {}

# CS TrustedSec BOFs https://github.com/trustedsec/CS-Situational-Awareness-BOF
# Repository: https://github.com/trustedsec/CS-Situational-Awareness-BOF

steps:
- name: "IPConfig"
Expand Down Expand Up @@ -87,4 +87,5 @@ steps:
"arguments": [],
"serialized_arguments": "00000000"
}'
command_name: execute_coff

command_name: execute_coff
5 changes: 3 additions & 2 deletions Apollo/LOW_ProcessRecon_Apollo.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ keywords:
- apollo_callback
environment: {}

# uses: https://github.com/trustedsec/CS-Situational-Awareness-BOF
# Repository: https://github.com/trustedsec/CS-Situational-Awareness-BOF

steps:
- name: "ProcessList"
Expand Down Expand Up @@ -52,4 +52,5 @@ steps:
"arguments": [],
"serialized_arguments": "00000000"
}'
command_name: execute_coff

command_name: execute_coff
5 changes: 3 additions & 2 deletions Apollo/LOW_SystemRecon_Apollo.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ keywords:
- apollo_callback
environment: {}

# uses https://github.com/trustedsec/CS-Situational-Awareness-BOF
# Repository: https://github.com/trustedsec/CS-Situational-Awareness-BOF

steps:
- name: "WhoAmI"
Expand Down Expand Up @@ -92,4 +92,5 @@ steps:
"arguments": [],
"serialized_arguments": "00000000"
}'
command_name: execute_coff

command_name: execute_coff
2 changes: 1 addition & 1 deletion Apollo/MEDIUM_CredentialPreperation_Apollo.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ keywords:
- apollo_callback
environment: {}

# uses: https://github.com/trustedsec/CS-Situational-Awareness-BOF, https://github.com/outflanknl/C2-Tool-Collection/tree/main/BOF/Klist
# Repository: https://github.com/trustedsec/CS-Situational-Awareness-BOF, https://github.com/outflanknl/C2-Tool-Collection/tree/main/BOF/Klist

steps:
- name: "Current User Context"
Expand Down