threatexpress / malleable-c2

Cobalt Strike Malleable C2 Design and Reference Guide
GNU General Public License v3.0
1.6k stars 296 forks source link

Help #15

Closed gabriel-maxx closed 1 year ago

gabriel-maxx commented 1 year ago

hello could you tell me why when I add a certain number of ips this happens?

[] dropping 192.168.1.22/jquery-3.3.1.min.js from Beacon profile for size [] dropping 192.168.1.21/jquery-3.3.1.min.js from Beacon profile for size [] dropping 192.168.1.20/jquery-3.3.1.min.js from Beacon profile for size [] dropping 192.168.1.19/jquery-3.3.1.min.js from Beacon profile for size [] dropping 192.168.1.18/jquery-3.3.1.min.js from Beacon profile for size [] dropping 192.168.1.17/jquery-3.3.1.min.js from Beacon profile for size [] dropping 192.168.1.22/jquery-3.3.1.min.js from Beacon profile for size [] dropping 192.168.1.21/jquery-3.3.1.min.js from Beacon profile for size [] dropping 192.168.1.20/jquery-3.3.1.min.js from Beacon profile for size [] dropping 192.168.1.19/jquery-3.3.1.min.js from Beacon profile for size [] dropping 192.168.1.18/jquery-3.3.1.min.js from Beacon profile for size [] dropping 192.168.1.17/jquery-3.3.1.min.js from Beacon profile for size [+] Listener: test started!

andrewchiles commented 1 year ago

Sorry for the delay in response! I'm guessing that error was likely due to the maximum size that Beacon allows for patching in the C2profile within Beacon. If you absolutely need that many callback IPs, you could try reducing the HTTP get/post content to reduce the overall size of the profile.