Introduction

A few weeks back, we launched Nighthawk Labs, a new feature within the Nighthawk Professional customer area that hosts a growing range of supporting tools, source code and research resources for extending or interacting with Nighthawk.

The Labs area will become the new home for a large amount of solutions created by MDSec over the last several years that allows users to extend, enhance and automate Nighthawk.

Labs will include, but not limited to tooling for:

• Custom egress command-and-control methods,
• Custom peer-to-peer command-and-control allowing users to reach beyond the built-in SMB and TCP listeners,
• Automation tools such as docker files, terraform scripts and HTTP redirector optimisations,
• Cross platform Nighthawk Configurator releases to automate profile generation and EDR bypass fine tuning,
• Open Agents in a variety of languages and supporting a range of platforms,
• PythonModules to extend the Nighthawk UI and integrate extensibility with external tools,
• API scripts to automate Nighthawk to perform a variety of tasks,
• Code for sample projects such as asynchronous BOFs and the StagerKit

Labs is integrated in to the new dashboard and is available to Professional users immediately, as so:

In addition to Labs, our team have been working on a number of new and exciting enhancements to supplement the toolkit and we expect to make these extensions available to Nighthawk Professional users over the coming months.

Watch this space.

Happy Hacking - @MDSecLabs + @nighthawk_c2.