metatool.py is a tool to help with the analysis of Metasploit or Cobalt Strike URLs.
More info can be found in my SANS Internet Storm Center diary entry “Finding Metasploit & Cobalt Strike URLs“.
It is still in my Github beta repository here.
Sunday 18 April 2021
2 Comments »
RSS feed for comments on this post. TrackBack URI
Didier Stevens 
[…] metatool.py […]
Pingback by Week 17 – 2021 – This Week In 4n6 — Sunday 25 April 2021 @ 11:33
[…] sum of the character values (aka checksum 8) is a known constant. We can check this with the tool metatool.py like […]
Pingback by Cobalt Strike: Using Known Private Keys To Decrypt Traffic – Part 2 – NVISO Labs — Wednesday 27 October 2021 @ 8:49