Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Cobalt Strike4.3 Failed to scan 64-bit beacon #1

Open
wuyoukm opened this issue Aug 11, 2021 · 4 comments
Open

Cobalt Strike4.3 Failed to scan 64-bit beacon #1

wuyoukm opened this issue Aug 11, 2021 · 4 comments

Comments

@wuyoukm
Copy link

wuyoukm commented Aug 11, 2021

Cobalt Strike4.3 Failed to scan 64-bit beacon
@CCob
Copy link
Owner

CCob commented Aug 11, 2021

Do you have the malleable profile available, or any other details you could share?

@ghost
Copy link

ghost commented Aug 22, 2021

how to use the -m option please ? should I do -m PID of beacon? or name of exe ?
beacause until now a I have got 3 beacon with 60s sleep time not detected at all with a publicly available malleable c2.

@CCob
Copy link
Owner

CCob commented Sep 6, 2021

Just -m on it's own with no args. It will monitor all processes found. If it's not being detected -m wont help you though. There is a bug in the heap enumeration where some memory is missed the scanning stage. I haven't fixed this yet, but hope to push something later this evening that I hope will solve some missed detections.

@CCob
Copy link
Owner

CCob commented Sep 6, 2021

Are you able to try with the latest commit?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@CCob @wuyoukm