> For the complete documentation index, see [llms.txt](https://wbglil.gitbook.io/cobalt-strike/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://wbglil.gitbook.io/cobalt-strike/cobalt-strikekuo-zhan/cs-jian-ce-gong-ju-cobaltstrikescan.md).

# CS检测工具CobaltStrikeScan绕过

这是一个扫描进程检测CS Beacon的工具并且可以解析C2配置

<https://github.com/Apr4h/CobaltStrikeScan>

![](/files/-MM5ArzBEnGgaqInDJMk)

但是其实很容易就能绕过你在C2配置文件里把cleanup选项打开`set cleanup "true";`即可绕过

![](/files/-MM5BYYHiBN78KdnyEK8)