CS teamserver.bat

摘要： cobaltstrike CS的teamserver經常是在linux伺服器上跑的，有小夥伴問在win server上怎麼跑，所以弄了一個批處理，需要的看著改改，win上面需要裝 java JDK ,win上預設沒有keytool,所以需要自...

ofollow,noindex" target="_blank">cobaltstrike

CS的teamserver經常是在linux伺服器上跑的，有小夥伴問在win server上怎麼跑，所以弄了一個批處理，需要的看著改改，win上面需要裝 java JDK ,win上預設沒有keytool,所以需要自己去生成一個cobaltstrike.store ~

@echo off
:check_java
java -version >nul 2>&1
if %errorLevel% == 0 (
goto:check_Permissions
) else (
echo [-] is Java installed?
goto:eof
)

:check_Permissions
echo [+] Administrative permissions required. Detecting permissions...
net session >nul 2>&1
if %errorLevel% == 0 (
echo [+] Success: Administrative permissions confirmed.
goto:check_certificate
) else (
echo [-] Failure: Current permissions inadequate.
goto:eof
)

:check_certificate
set certificate=".\cobaltstrike.store"
if exist %certificate% (
goto:test_arguments
) else (
echo [!] Please generate the cobaltstrike.store !
echo [!] Example: keytool -keystore ./cobaltstrike.store -storepass 123456 -keypass 123456 -genkey -keyalg RSA -alias cobaltstrike -dname "CN=Major Cobalt Strike, OU=AdvancedPenTesting, O=cobaltstrike, L=Somewhere, S=Cyberspace, C=Earth"
goto:eof
)

:test_arguments
set argC=0
for %%x in (%*) do Set /A argC+=1
if %argC% LSS 2 (
echo [-] teamserver ^<host^> ^<password^> [/path/to/c2.profile] [YYYY-MM-DD]
echo^<host^> is the default IP address of this Cobalt Strike team server
echo^<password^> is the shared password to connect to this server
echo[/path/to/c2.profile] is your Malleable C2 profile
echo[YYYY-MM-DD] is a kill date for Beacon payloads run from this server
goto:eof
) else (
goto:run_cobal
)
:run_cobal
java -XX:ParallelGCThreads=4 -Dcobaltstrike.server_port=50050 -Djavax.net.ssl.keyStore=./cobaltstrike.store -Djavax.net.ssl.keyStorePassword=123456 -server -XX:+AggressiveHeap -XX:+UseParallelGC -classpath ./cobaltstrike.jar server.TeamServer %*

本文由Evi1cg 創作，採用知識共享署名4.0 國際許可協議進行許可

本站文章除註明轉載/出處外，均為本站原創或翻譯，轉載前請務必署名

最後編輯時間為: Sep 10, 2018 at 09:45 am