研究CobaltStrike时的一些副产品
研究CobaltStrike时的一些副产品
.cobaltstrike.beacon_keys中存储了CS通信时用来加密的RSA公私钥，所以如CrossC2，
geacon等c2都需要解析这个文件，CrossC2怎么弄得我不知道，但是找了找，网上基本都是用
Java进行解析
这个文件本身其实就是一个KeyPair的Java对象，Python的javaobj-py3库可以直接读取里面存储的数据。
主要好处是无视serialVersionUID导致的版本兼容性问题，同时Python的启动速度较Java较快
来源：https://github.com/ryanohoro/csbruter
暴力破解Cobalt Strike团队服务器密码的脚本。
由于Cobalt Strike 3.10（于2017年12月11日发布）在尝试之间施加了1秒的延迟，以缓解 此攻击，目前爆破的效果不是很好。
此处仅做收集，后续有需要可以考虑用Golang重构或者优化爆破脚本
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
Django
The Web framework for perfectionists with deadlines.
Laravel
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft
Open source projects and samples from Microsoft.
Google
Google ❤️ Open Source for everyone.
Alibaba
Alibaba Open Source for everyone
D3
Data-Driven Documents codes.
Tencent
China tencent open source team.
