# Cobalt Strike

## Cobalt Strike

- [前言](https://wbglil.gitbook.io/cobalt-strike/master.md): 文档迁移到新版gitbook旧版废弃以删除
- [目录](https://wbglil.gitbook.io/cobalt-strike/mu-lu.md)
- [Cobalt Strike简介](https://wbglil.gitbook.io/cobalt-strike/cobalt-strikejian-jie.md)
- [Cobalt Strike基本使用](https://wbglil.gitbook.io/cobalt-strike/cobalt-strikeji-ben-shi-yong.md)
- [界面功能介绍](https://wbglil.gitbook.io/cobalt-strike/cobalt-strikeji-ben-shi-yong/jie-mian-gong-neng-jie-shao.md)
- [CS4.0功能演示](https://wbglil.gitbook.io/cobalt-strike/cobalt-strikeji-ben-shi-yong/cs4.0-gong-neng-yan-shi.md)
- [监听器（Listener）](https://wbglil.gitbook.io/cobalt-strike/cobalt-strikeji-ben-shi-yong/jian-ting-qi-listener.md)
- [Cobalt Strike Beacon命令](https://wbglil.gitbook.io/cobalt-strike/cobalt-strikemo-kuai-jie-shao.md)
- [Cobalt Strike脚本使用](https://wbglil.gitbook.io/cobalt-strike/cobalt-strikejiao-ben-shi-yong.md): 本页是原3.x的时候写的，到现在为止3.x和4.x有小部分函数不兼容不过大部分都没问题通用，日后有时间在补上
- [Cobalt Strike脚本编写](https://wbglil.gitbook.io/cobalt-strike/cobalt-strikejiao-ben-bian-xie.md)
- [aggressor-script文档翻译](https://wbglil.gitbook.io/cobalt-strike/cobalt-strikejiao-ben-bian-xie/aggressorscript-wen-dang-fan-yi.md)
- [ArtifactPayloadGenerator.cna脚本bug修复](https://wbglil.gitbook.io/cobalt-strike/cobalt-strikejiao-ben-bian-xie/artifactpayloadgeneratorcnajiao-ben-bug-xiu-fu.md)
- [COM劫持利用脚本编写](https://wbglil.gitbook.io/cobalt-strike/cobalt-strikejiao-ben-bian-xie/comjie-chi-li-yong-jiao-ben-bian-xie.md)
- [TODO](https://wbglil.gitbook.io/cobalt-strike/cobalt-strikejiao-ben-bian-xie/todo.md)
- [Cobalt Strike扩展](https://wbglil.gitbook.io/cobalt-strike/cobalt-strikekuo-zhan.md)
- [Malleable C2](https://wbglil.gitbook.io/cobalt-strike/cobalt-strikekuo-zhan/malleable-c2.md)
- [External C2](https://wbglil.gitbook.io/cobalt-strike/cobalt-strikekuo-zhan/external-c2.md): 这东西其实依靠的就是SMB Beacon payload
- [CS证书相关](https://wbglil.gitbook.io/cobalt-strike/cobalt-strikekuo-zhan/csmo-ren-duan-53e3-zheng-4e66-za-xiang.md)
- [CS Beacon和监听器](https://wbglil.gitbook.io/cobalt-strike/cobalt-strikekuo-zhan/cs-beaconhe-jian-ting-qi.md)
- [转发重定向](https://wbglil.gitbook.io/cobalt-strike/cobalt-strikekuo-zhan/dai-xie.md)
- [CDN代理转发](https://wbglil.gitbook.io/cobalt-strike/cobalt-strikekuo-zhan/dai-xie-1.md)
- [CDN与转发器](https://wbglil.gitbook.io/cobalt-strike/cobalt-strikekuo-zhan/dai-xie-3.md)
- [CS部分功能启用](https://wbglil.gitbook.io/cobalt-strike/cobalt-strikekuo-zhan/cs-bu-fen-gong-neng-qi-yong.md)
- [CS检测工具CobaltStrikeScan绕过](https://wbglil.gitbook.io/cobalt-strike/cobalt-strikekuo-zhan/cs-jian-ce-gong-ju-cobaltstrikescan.md)
- [联动Core impact](https://wbglil.gitbook.io/cobalt-strike/cobalt-strikekuo-zhan/dai-xie-2.md)
- [一些注意事项和Tips](https://wbglil.gitbook.io/cobalt-strike/cobalt-strikekuo-zhan/yi-xie-zhu-yi-shi-xiang-he-tips.md)
- [Cobalt Strike原理介绍](https://wbglil.gitbook.io/cobalt-strike/cobalt-strike-yuan-li-jie-shao.md)
- [介绍](https://wbglil.gitbook.io/cobalt-strike/cobalt-strike-yuan-li-jie-shao/untitled.md)
- [Payload生成分析](https://wbglil.gitbook.io/cobalt-strike/cobalt-strike-yuan-li-jie-shao/payload-sheng-cheng.md)
- [Payload生成分析后续补充](https://wbglil.gitbook.io/cobalt-strike/cobalt-strike-yuan-li-jie-shao/payload-sheng-cheng-fen-xi-hou-xu-bu-chong.md): 本章节是对上一个章节Payload生成分析的补充内容
- [Stager Payload原理分析](https://wbglil.gitbook.io/cobalt-strike/cobalt-strike-yuan-li-jie-shao/untitled-1.md)
- [Beacon加载执行过程](https://wbglil.gitbook.io/cobalt-strike/cobalt-strike-yuan-li-jie-shao/beacon-jia-zai-zhi-hang-guo-cheng.md)
- [进程参数欺骗原理](https://wbglil.gitbook.io/cobalt-strike/cobalt-strike-yuan-li-jie-shao/can-shu-qi-pian.md)
- [CS登录通信分析](https://wbglil.gitbook.io/cobalt-strike/cobalt-strike-yuan-li-jie-shao/untitled-2.md)
- [CS Beacon通信分析](https://wbglil.gitbook.io/cobalt-strike/cobalt-strike-yuan-li-jie-shao/cs-mu-biao-shang-xian-guo-cheng.md)
- [内存加载分析（cs模块）](https://wbglil.gitbook.io/cobalt-strike/cobalt-strike-yuan-li-jie-shao/untitled-5.md)
- [Beacon Object File(BOF实现原理)](https://wbglil.gitbook.io/cobalt-strike/cobalt-strike-yuan-li-jie-shao/untitled-3.md): （注：本文不是讲解BOF代码开发和使用而是讲解BOF实现原理）
- [Beacon dll Hollowing](https://wbglil.gitbook.io/cobalt-strike/cobalt-strike-yuan-li-jie-shao/beacon-dll-hollowing.md)
- [Beacon动态内存加密](https://wbglil.gitbook.io/cobalt-strike/cobalt-strike-yuan-li-jie-shao/beacon-nei-cun-hun-xiao.md)
- [第三方客户端实现](https://wbglil.gitbook.io/cobalt-strike/cobalt-strike-yuan-li-jie-shao/untitled-4.md)
- [Beacon完整流程分析](https://wbglil.gitbook.io/cobalt-strike/cobalt-strike-yuan-li-jie-shao/untitled-4/xiang-guan-xiang-mu-fen-xi.md)
- [TODO](https://wbglil.gitbook.io/cobalt-strike/cobalt-strike-yuan-li-jie-shao/untitled-4/todo.md)
- [TODO](https://wbglil.gitbook.io/cobalt-strike/cobalt-strike-yuan-li-jie-shao/untitled-4/todo-1.md)
- [Beacon跨平台移植](https://wbglil.gitbook.io/cobalt-strike/cobalt-strike-yuan-li-jie-shao/untitled-4/beacon-payload-linux-yi-zhi.md)
- [TODO](https://wbglil.gitbook.io/cobalt-strike/cobalt-strike-yuan-li-jie-shao/dai-xie.md)
- [Cobalt Strike攻击防御](https://wbglil.gitbook.io/cobalt-strike/cobalt-strike-gong-ji-fang-yu.md)
- [关于BeaconEye里的一点小bug](https://wbglil.gitbook.io/cobalt-strike/cobalt-strike-gong-ji-fang-yu/untitled-1.md)
- [防御Demon](https://wbglil.gitbook.io/cobalt-strike/cobalt-strike-gong-ji-fang-yu/untitled.md)
- [说明](https://wbglil.gitbook.io/cobalt-strike/cobalt-strike313han-hua-ban-xiu-gai-ban.md)