CobaltStrike_Script_Wechat_Push

CobaltStrike Becon online reminder

0x01 Cause:

Because I have been testing some social engineering fishing targets recently, it is a bit painful to wait for Beacon to rebound every time!

I followed some methods on the Internet and wrote a plug-in for online reminders. I reminded them through WeChat Server Sauce. After testing the effect, it was ok!

0x02 test configuration

1. Go online remotely:

2. Beacon rebounds, server sauce reminds!

3. How to use:

Because it is reminded through the client, we can run this plug-in through CobaltStrike's own agscript and run it in the background of the server:

(0) Fill in the Key of your Server Sauce. The official website link of Server Sauce is as follows:

http://sc.ftqq.com/3.version

(1) Open the link, log in to your Github account, bind the official account to WeChat, and there is a key in the WeChat push option.

(2) Open the cna file and add Key:

(3) Run cna plug-in in the background:

 ./agscript [host] [port] [user] [pass] 

• [host] Server IP
• [port] cs port number, default 50050
• [user] username
• [pass] cs password
• [path] cna plug-in path

(4) After the configuration is successful, your Server sauce will receive a test message!

(5) If you want to push through other webhook methods, modify it yourself!