{"id":476293,"date":"2023-08-09T07:28:31","date_gmt":"2023-08-09T07:28:31","guid":{"rendered":""},"modified":"2023-09-05T11:12:25","modified_gmt":"2023-09-05T11:12:25","slug":"cobalt-strike","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/jp\/wiki\/cobalt-strike\/","title":{"rendered":"\u30b3\u30d0\u30eb\u30c8\u30b9\u30c8\u30e9\u30a4\u30ad"},"content":{"rendered":"<p>Cobalt Strike \u306f\u30012 \u3064\u306e\u76ee\u7684\u3092\u6301\u3064\u6a5f\u80fd\u3067\u8a55\u5224\u3092\u5f97\u305f\u5f37\u529b\u306a\u4fb5\u5165\u30c6\u30b9\u30c8 \u30c4\u30fc\u30eb\u3067\u3059\u3002\u3082\u3068\u3082\u3068\u306f\u6b63\u5f53\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30c6\u30b9\u30c8\u7528\u306b\u8a2d\u8a08\u3055\u308c\u307e\u3057\u305f\u304c\u3001\u9ad8\u5ea6\u306a\u30a8\u30af\u30b9\u30d7\u30ed\u30a4\u30c8\u5f8c\u306e\u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af\u3068\u3057\u3066\u8105\u5a01\u30a2\u30af\u30bf\u30fc\u306e\u9593\u3067\u4eba\u6c17\u3092\u535a\u3057\u307e\u3057\u305f\u3002Cobalt Strike \u306f\u3001\u30ec\u30c3\u30c9 \u30c1\u30fc\u30e0\u3001\u30bd\u30fc\u30b7\u30e3\u30eb \u30a8\u30f3\u30b8\u30cb\u30a2\u30ea\u30f3\u30b0\u3001\u6a19\u7684\u578b\u653b\u6483\u306e\u30b7\u30df\u30e5\u30ec\u30fc\u30b7\u30e7\u30f3\u306e\u305f\u3081\u306e\u9ad8\u5ea6\u306a\u6a5f\u80fd\u3092\u63d0\u4f9b\u3057\u307e\u3059\u3002\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5c02\u9580\u5bb6\u306f\u3001\u5b9f\u969b\u306e\u653b\u6483\u30b7\u30ca\u30ea\u30aa\u3092\u30b7\u30df\u30e5\u30ec\u30fc\u30c8\u3059\u308b\u3053\u3068\u3067\u3001\u7d44\u7e54\u306e\u9632\u5fa1\u3092\u8a55\u4fa1\u304a\u3088\u3073\u5f37\u5316\u3067\u304d\u307e\u3059\u3002<\/p>\n<h2>\u30b3\u30d0\u30eb\u30c8\u30b9\u30c8\u30e9\u30a4\u30af\u306e\u8d77\u6e90\u3068\u305d\u306e\u6700\u521d\u306e\u8a00\u53ca\u306e\u6b74\u53f2<\/h2>\n<p>Cobalt Strike \u306f Raphael Mudge \u306b\u3088\u3063\u3066\u958b\u767a\u3055\u308c\u30012012 \u5e74\u306b\u5546\u7528\u30c4\u30fc\u30eb\u3068\u3057\u3066\u521d\u3081\u3066\u30ea\u30ea\u30fc\u30b9\u3055\u308c\u307e\u3057\u305f\u3002\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30b3\u30df\u30e5\u30cb\u30c6\u30a3\u306e\u8457\u540d\u4eba\u3067\u3042\u308b Raphael Mudge \u306f\u3001\u5f53\u521d\u306f Metasploit \u306e\u30d5\u30ed\u30f3\u30c8\u30a8\u30f3\u30c9\u3067\u3042\u308b Armitage \u3092\u4f5c\u6210\u3057\u3001\u305d\u306e\u5f8c Cobalt Strike \u306b\u6ce8\u529b\u3057\u307e\u3057\u305f\u3002Armitage \u306f\u3001Metasploit \u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af\u306e\u30a8\u30af\u30b9\u30d7\u30ed\u30a4\u30c8\u5f8c\u306e\u6a5f\u80fd\u3092\u5f37\u5316\u3059\u308b\u3088\u3046\u306b\u8a2d\u8a08\u3055\u308c\u305f Cobalt Strike \u306e\u57fa\u76e4\u3068\u3057\u3066\u6a5f\u80fd\u3057\u307e\u3057\u305f\u3002<\/p>\n<h2>Cobalt Strike\u306e\u8a73\u7d30\u60c5\u5831: Cobalt Strike\u306e\u30c8\u30d4\u30c3\u30af\u306e\u62e1\u5f35<\/h2>\n<p>Cobalt Strike \u306f\u3001\u4e3b\u306b\u30ec\u30c3\u30c9\u30c1\u30fc\u30e0\u6f14\u7fd2\u3084\u4fb5\u5165\u30c6\u30b9\u30c8\u306e\u53d6\u308a\u7d44\u307f\u306b\u4f7f\u7528\u3055\u308c\u307e\u3059\u3002\u653b\u6483\u30b7\u30ca\u30ea\u30aa\u306e\u4f5c\u6210\u3068\u7ba1\u7406\u306e\u30d7\u30ed\u30bb\u30b9\u3092\u7c21\u7d20\u5316\u3059\u308b\u30b0\u30e9\u30d5\u30a3\u30ab\u30eb \u30e6\u30fc\u30b6\u30fc \u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30a4\u30b9 (GUI) \u3092\u63d0\u4f9b\u3057\u307e\u3059\u3002\u3053\u306e\u30c4\u30fc\u30eb\u306f\u30e2\u30b8\u30e5\u30fc\u30eb\u69cb\u9020\u306b\u306a\u3063\u3066\u3044\u308b\u305f\u3081\u3001\u30e6\u30fc\u30b6\u30fc\u306f\u30ab\u30b9\u30bf\u30e0 \u30b9\u30af\u30ea\u30d7\u30c8\u3084\u30d7\u30e9\u30b0\u30a4\u30f3\u3092\u4f7f\u7528\u3057\u3066\u6a5f\u80fd\u3092\u62e1\u5f35\u3067\u304d\u307e\u3059\u3002<\/p>\n<p>Cobalt Strike \u306e\u4e3b\u306a\u30b3\u30f3\u30dd\u30fc\u30cd\u30f3\u30c8\u306f\u6b21\u306e\u3068\u304a\u308a\u3067\u3059\u3002<\/p>\n<ol>\n<li>\n<p><strong>\u30d3\u30fc\u30b3\u30f3<\/strong>: \u30d3\u30fc\u30b3\u30f3\u306f\u3001\u653b\u6483\u8005\u3068\u4fb5\u5bb3\u3055\u308c\u305f\u30b7\u30b9\u30c6\u30e0\u9593\u306e\u4e3b\u8981\u306a\u901a\u4fe1\u30c1\u30e3\u30cd\u30eb\u3068\u3057\u3066\u6a5f\u80fd\u3059\u308b\u8efd\u91cf\u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u3067\u3059\u3002\u6a19\u7684\u306e\u30de\u30b7\u30f3\u306b\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u3066\u6c38\u7d9a\u7684\u306b\u5b58\u5728\u3057\u7d9a\u3051\u3001\u30a8\u30af\u30b9\u30d7\u30ed\u30a4\u30c8\u5f8c\u306e\u3055\u307e\u3056\u307e\u306a\u30bf\u30b9\u30af\u3092\u5b9f\u884c\u3067\u304d\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>C2 \u30b5\u30fc\u30d0\u30fc<\/strong>\u30b3\u30de\u30f3\u30c9 \u30a2\u30f3\u30c9 \u30b3\u30f3\u30c8\u30ed\u30fc\u30eb (C2) \u30b5\u30fc\u30d0\u30fc\u306f Cobalt Strike \u306e\u4e2d\u6838\u3067\u3059\u3002\u30d3\u30fc\u30b3\u30f3 \u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u3068\u306e\u901a\u4fe1\u3092\u7ba1\u7406\u3057\u3001\u30aa\u30da\u30ec\u30fc\u30bf\u30fc\u304c\u30b3\u30de\u30f3\u30c9\u3092\u767a\u884c\u3057\u3001\u7d50\u679c\u3092\u53d7\u4fe1\u3057\u3001\u4fb5\u5bb3\u3055\u308c\u305f\u8907\u6570\u306e\u30db\u30b9\u30c8\u3092\u8abf\u6574\u3067\u304d\u308b\u3088\u3046\u306b\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30c1\u30fc\u30e0\u30b5\u30fc\u30d0\u30fc<\/strong>: \u30c1\u30fc\u30e0 \u30b5\u30fc\u30d0\u30fc\u306f\u3001Cobalt Strike \u306e\u8907\u6570\u306e\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u3092\u8abf\u6574\u3057\u3001\u30c1\u30fc\u30e0\u74b0\u5883\u3067\u306e\u5171\u540c\u4f5c\u696d\u3092\u53ef\u80fd\u306b\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u53ef\u935b\u6027C2<\/strong>: \u3053\u306e\u6a5f\u80fd\u306b\u3088\u308a\u3001\u30aa\u30da\u30ec\u30fc\u30bf\u306f\u30cd\u30c3\u30c8\u30ef\u30fc\u30af \u30c8\u30e9\u30d5\u30a3\u30c3\u30af \u30d1\u30bf\u30fc\u30f3\u3092\u5909\u66f4\u3057\u3001\u305d\u308c\u3092\u6b63\u5f53\u306a\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u306e\u3088\u3046\u306b\u898b\u305b\u304b\u3051\u3001\u4fb5\u5165\u691c\u77e5\u30b7\u30b9\u30c6\u30e0 (IDS) \u3084\u305d\u306e\u4ed6\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30e1\u30ab\u30cb\u30ba\u30e0\u306b\u3088\u308b\u691c\u51fa\u3092\u56de\u907f\u3067\u304d\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>Cobalt Strike\u306e\u5185\u90e8\u69cb\u9020: Cobalt Strike\u306e\u4ed5\u7d44\u307f<\/h2>\n<p>Cobalt Strike \u306e\u30a2\u30fc\u30ad\u30c6\u30af\u30c1\u30e3\u306f\u3001\u30af\u30e9\u30a4\u30a2\u30f3\u30c8 \u30b5\u30fc\u30d0\u30fc \u30e2\u30c7\u30eb\u306b\u57fa\u3065\u3044\u3066\u3044\u307e\u3059\u3002\u30aa\u30da\u30ec\u30fc\u30bf\u30fc\u306f\u3001\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u304c\u63d0\u4f9b\u3059\u308b\u30b0\u30e9\u30d5\u30a3\u30ab\u30eb \u30e6\u30fc\u30b6\u30fc \u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30a4\u30b9 (GUI) \u3092\u4ecb\u3057\u3066\u30c4\u30fc\u30eb\u3092\u64cd\u4f5c\u3057\u307e\u3059\u3002\u653b\u6483\u8005\u306e\u30de\u30b7\u30f3\u3067\u5b9f\u884c\u3055\u308c\u308b C2 \u30b5\u30fc\u30d0\u30fc\u306f\u3001\u4fb5\u5bb3\u3055\u308c\u305f\u30b7\u30b9\u30c6\u30e0\u306b\u5c55\u958b\u3055\u308c\u305f\u30d3\u30fc\u30b3\u30f3 \u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u3068\u306e\u901a\u4fe1\u3092\u51e6\u7406\u3057\u307e\u3059\u3002\u30d3\u30fc\u30b3\u30f3 \u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u306f\u30bf\u30fc\u30b2\u30c3\u30c8 \u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u306e\u8db3\u639b\u304b\u308a\u3068\u306a\u308a\u3001\u30aa\u30da\u30ec\u30fc\u30bf\u30fc\u304c\u30a8\u30af\u30b9\u30d7\u30ed\u30a4\u30c8\u5f8c\u306e\u3055\u307e\u3056\u307e\u306a\u30a2\u30af\u30c6\u30a3\u30d3\u30c6\u30a3\u3092\u5b9f\u884c\u3067\u304d\u308b\u3088\u3046\u306b\u3057\u307e\u3059\u3002<\/p>\n<p>Cobalt Strike \u30a8\u30f3\u30b2\u30fc\u30b8\u30e1\u30f3\u30c8\u306e\u4e00\u822c\u7684\u306a\u30ef\u30fc\u30af\u30d5\u30ed\u30fc\u306b\u306f\u3001\u6b21\u306e\u624b\u9806\u304c\u542b\u307e\u308c\u307e\u3059\u3002<\/p>\n<ol>\n<li>\n<p><strong>\u6700\u521d\u306e\u59a5\u5354<\/strong>\u653b\u6483\u8005\u306f\u3001\u30b9\u30d4\u30a2\u30d5\u30a3\u30c3\u30b7\u30f3\u30b0\u3001\u30bd\u30fc\u30b7\u30e3\u30eb\u30a8\u30f3\u30b8\u30cb\u30a2\u30ea\u30f3\u30b0\u3001\u8106\u5f31\u6027\u306e\u60aa\u7528\u306a\u3069\u3001\u3055\u307e\u3056\u307e\u306a\u624b\u6bb5\u3092\u901a\u3058\u3066\u30bf\u30fc\u30b2\u30c3\u30c8\u30b7\u30b9\u30c6\u30e0\u306b\u30a2\u30af\u30bb\u30b9\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30da\u30a4\u30ed\u30fc\u30c9\u914d\u4fe1<\/strong>\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u5185\u306b\u4fb5\u5165\u3059\u308b\u3068\u3001\u653b\u6483\u8005\u306f Cobalt Strike Beacon \u30da\u30a4\u30ed\u30fc\u30c9\u3092\u4fb5\u5bb3\u3055\u308c\u305f\u30b7\u30b9\u30c6\u30e0\u306b\u914d\u4fe1\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30d3\u30fc\u30b3\u30f3\u306e\u57cb\u3081\u8fbc\u307f<\/strong>: \u30d3\u30fc\u30b3\u30f3\u304c\u30b7\u30b9\u30c6\u30e0\u306e\u30e1\u30e2\u30ea\u306b\u57cb\u3081\u8fbc\u307e\u308c\u3001C2 \u30b5\u30fc\u30d0\u30fc\u3068\u306e\u63a5\u7d9a\u304c\u78ba\u7acb\u3055\u308c\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30b3\u30de\u30f3\u30c9\u306e\u5b9f\u884c<\/strong>\u30aa\u30da\u30ec\u30fc\u30bf\u30fc\u306f\u3001Cobalt Strike \u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u3092\u901a\u3058\u3066 Beacon \u306b\u30b3\u30de\u30f3\u30c9\u3092\u767a\u884c\u3057\u3001\u5075\u5bdf\u3001\u6a2a\u65b9\u5411\u306e\u79fb\u52d5\u3001\u30c7\u30fc\u30bf\u306e\u6d41\u51fa\u3001\u6a29\u9650\u306e\u6607\u683c\u306a\u3069\u306e\u30a2\u30af\u30b7\u30e7\u30f3\u3092\u5b9f\u884c\u3059\u308b\u3088\u3046\u306b\u6307\u793a\u3067\u304d\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u643e\u53d6\u5f8c<\/strong>Cobalt Strike \u306f\u3001\u8cc7\u683c\u60c5\u5831\u306e\u53ce\u96c6\u3001\u30dd\u30fc\u30c8 \u30b9\u30ad\u30e3\u30f3\u3001\u30d5\u30a1\u30a4\u30eb\u7ba1\u7406\u306e\u305f\u3081\u306e mimikatz \u7d71\u5408\u306a\u3069\u3001\u3055\u307e\u3056\u307e\u306a\u30a8\u30af\u30b9\u30d7\u30ed\u30a4\u30c8\u5f8c\u306e\u30bf\u30b9\u30af\u306b\u5bfe\u5fdc\u3059\u308b\u3055\u307e\u3056\u307e\u306a\u7d44\u307f\u8fbc\u307f\u30c4\u30fc\u30eb\u3068\u30e2\u30b8\u30e5\u30fc\u30eb\u3092\u63d0\u4f9b\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u6301\u7d9a\u6027<\/strong>: \u6c38\u7d9a\u7684\u306a\u5b58\u5728\u3092\u7dad\u6301\u3059\u308b\u305f\u3081\u306b\u3001Cobalt Strike \u306f\u3001\u30d3\u30fc\u30b3\u30f3 \u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u304c\u518d\u8d77\u52d5\u3084\u30b7\u30b9\u30c6\u30e0\u5909\u66f4\u5f8c\u3082\u5b58\u7d9a\u3067\u304d\u308b\u3088\u3046\u306b\u3059\u308b\u3055\u307e\u3056\u307e\u306a\u624b\u6cd5\u3092\u30b5\u30dd\u30fc\u30c8\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>Cobalt Strike\u306e\u4e3b\u306a\u7279\u5fb4\u306e\u5206\u6790<\/h2>\n<p>Cobalt Strike \u306f\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5c02\u9580\u5bb6\u3068\u60aa\u610f\u306e\u3042\u308b\u884c\u70ba\u8005\u306e\u4e21\u65b9\u306b\u3068\u3063\u3066\u597d\u307e\u3057\u3044\u9078\u629e\u80a2\u3068\u306a\u308b\u8c4a\u5bcc\u306a\u6a5f\u80fd\u3092\u5099\u3048\u3066\u3044\u307e\u3059\u3002\u4e3b\u306a\u6a5f\u80fd\u306f\u6b21\u306e\u3068\u304a\u308a\u3067\u3059\u3002<\/p>\n<ol>\n<li>\n<p><strong>\u30bd\u30fc\u30b7\u30e3\u30eb\u30a8\u30f3\u30b8\u30cb\u30a2\u30ea\u30f3\u30b0\u30c4\u30fc\u30eb\u30ad\u30c3\u30c8<\/strong>Cobalt Strike \u306b\u306f\u3001\u30aa\u30da\u30ec\u30fc\u30bf\u30fc\u304c\u6a19\u7684\u3092\u7d5e\u3063\u305f\u30d5\u30a3\u30c3\u30b7\u30f3\u30b0 \u30ad\u30e3\u30f3\u30da\u30fc\u30f3\u3092\u5b9f\u884c\u3057\u3001\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u5074\u306e\u653b\u6483\u3092\u901a\u3058\u3066\u8cb4\u91cd\u306a\u60c5\u5831\u3092\u53ce\u96c6\u3067\u304d\u308b\u3088\u3046\u306b\u3059\u308b\u5305\u62ec\u7684\u306a\u30bd\u30fc\u30b7\u30e3\u30eb \u30a8\u30f3\u30b8\u30cb\u30a2\u30ea\u30f3\u30b0 \u30c4\u30fc\u30eb\u30ad\u30c3\u30c8 (SET) \u304c\u542b\u307e\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30ec\u30c3\u30c9\u30c1\u30fc\u30e0\u306e\u30b3\u30e9\u30dc\u30ec\u30fc\u30b7\u30e7\u30f3<\/strong>: \u30c1\u30fc\u30e0 \u30b5\u30fc\u30d0\u30fc\u3092\u4f7f\u7528\u3059\u308b\u3068\u3001\u30ec\u30c3\u30c9 \u30c1\u30fc\u30e0\u306e\u30e1\u30f3\u30d0\u30fc\u306f\u5171\u540c\u3067\u4f5c\u696d\u3057\u3001\u60c5\u5831\u3092\u5171\u6709\u3057\u3001\u4f5c\u696d\u3092\u52b9\u679c\u7684\u306b\u8abf\u6574\u3067\u304d\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>C2 \u30c1\u30e3\u30cd\u30eb\u306e\u96e3\u8aad\u5316<\/strong>: Malleable C2 \u306f\u30cd\u30c3\u30c8\u30ef\u30fc\u30af \u30c8\u30e9\u30d5\u30a3\u30c3\u30af \u30d1\u30bf\u30fc\u30f3\u3092\u5909\u66f4\u3059\u308b\u6a5f\u80fd\u3092\u63d0\u4f9b\u3059\u308b\u305f\u3081\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30c4\u30fc\u30eb\u306b\u3088\u308b Cobalt Strike \u306e\u5b58\u5728\u306e\u691c\u51fa\u304c\u56f0\u96e3\u306b\u306a\u308a\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30dd\u30b9\u30c8\u30a8\u30af\u30b9\u30d7\u30ed\u30a4\u30c8\u30e2\u30b8\u30e5\u30fc\u30eb<\/strong>\u3053\u306e\u30c4\u30fc\u30eb\u306b\u306f\u3001\u3055\u307e\u3056\u307e\u306a\u30a8\u30af\u30b9\u30d7\u30ed\u30a4\u30c8\u5f8c\u306e\u30e2\u30b8\u30e5\u30fc\u30eb\u304c\u4ed8\u5c5e\u3057\u3066\u304a\u308a\u3001\u6a2a\u65b9\u5411\u306e\u79fb\u52d5\u3001\u6a29\u9650\u306e\u6607\u683c\u3001\u30c7\u30fc\u30bf\u306e\u6d41\u51fa\u306a\u3069\u306e\u3055\u307e\u3056\u307e\u306a\u30bf\u30b9\u30af\u3092\u7c21\u7d20\u5316\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30d4\u30dc\u30c3\u30c8\u3068\u30dd\u30fc\u30c8\u8ee2\u9001<\/strong>Cobalt Strike \u306f\u30d4\u30dc\u30c3\u30c8\u304a\u3088\u3073\u30dd\u30fc\u30c8\u8ee2\u9001\u6280\u8853\u3092\u30b5\u30dd\u30fc\u30c8\u3057\u3066\u304a\u308a\u3001\u653b\u6483\u8005\u304c\u3055\u307e\u3056\u307e\u306a\u30cd\u30c3\u30c8\u30ef\u30fc\u30af \u30bb\u30b0\u30e1\u30f3\u30c8\u4e0a\u306e\u30b7\u30b9\u30c6\u30e0\u306b\u30a2\u30af\u30bb\u30b9\u3057\u3066\u4fb5\u5bb3\u3059\u308b\u3053\u3068\u3092\u53ef\u80fd\u306b\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30ec\u30dd\u30fc\u30c8\u751f\u6210<\/strong>: \u30a8\u30f3\u30b2\u30fc\u30b8\u30e1\u30f3\u30c8\u5f8c\u3001Cobalt Strike \u306f\u3001\u4f7f\u7528\u3055\u308c\u305f\u624b\u6cd5\u3001\u767a\u898b\u3055\u308c\u305f\u8106\u5f31\u6027\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u3092\u6539\u5584\u3059\u308b\u305f\u3081\u306e\u63a8\u5968\u4e8b\u9805\u3092\u8a73\u8ff0\u3057\u305f\u5305\u62ec\u7684\u306a\u30ec\u30dd\u30fc\u30c8\u3092\u751f\u6210\u3067\u304d\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>\u30b3\u30d0\u30eb\u30c8\u30b9\u30c8\u30e9\u30a4\u30af\u306e\u7a2e\u985e<\/h2>\n<p>Cobalt Strike \u306b\u306f\u3001\u30d7\u30ed\u30d5\u30a7\u30c3\u30b7\u30e7\u30ca\u30eb\u7248\u3068\u30c8\u30e9\u30a4\u30a2\u30eb\u7248\u306e 2 \u3064\u306e\u4e3b\u8981\u30a8\u30c7\u30a3\u30b7\u30e7\u30f3\u304c\u3042\u308a\u307e\u3059\u3002\u30d7\u30ed\u30d5\u30a7\u30c3\u30b7\u30e7\u30ca\u30eb\u7248\u306f\u3001\u6b63\u898f\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5c02\u9580\u5bb6\u304c\u4fb5\u5165\u30c6\u30b9\u30c8\u3084\u30ec\u30c3\u30c9\u30c1\u30fc\u30e0\u6f14\u7fd2\u306b\u4f7f\u7528\u3059\u308b\u30d5\u30eb\u6a5f\u80fd\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u3059\u3002\u30c8\u30e9\u30a4\u30a2\u30eb\u7248\u306f\u3001\u7121\u6599\u3067\u63d0\u4f9b\u3055\u308c\u308b\u9650\u5b9a\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u3001\u30e6\u30fc\u30b6\u30fc\u306f\u8cfc\u5165\u3092\u6c7a\u5b9a\u3059\u308b\u524d\u306b Cobalt Strike \u306e\u6a5f\u80fd\u3092\u8a66\u3059\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002<\/p>\n<p>2 \u3064\u306e\u30a8\u30c7\u30a3\u30b7\u30e7\u30f3\u306e\u6bd4\u8f03\u306f\u6b21\u306e\u3068\u304a\u308a\u3067\u3059\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u7279\u5fb4<\/th>\n<th>\u30d7\u30ed\u30d5\u30a7\u30c3\u30b7\u30e7\u30ca\u30eb\u30a8\u30c7\u30a3\u30b7\u30e7\u30f3<\/th>\n<th>\u30c8\u30e9\u30a4\u30a2\u30eb\u7248<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u3059\u3079\u3066\u306e\u30e2\u30b8\u30e5\u30fc\u30eb\u3078\u306e\u30a2\u30af\u30bb\u30b9<\/td>\n<td>\u306f\u3044<\/td>\n<td>\u30a2\u30af\u30bb\u30b9\u5236\u9650<\/td>\n<\/tr>\n<tr>\n<td>\u30b3\u30e9\u30dc\u30ec\u30fc\u30b7\u30e7\u30f3<\/td>\n<td>\u306f\u3044<\/td>\n<td>\u306f\u3044<\/td>\n<\/tr>\n<tr>\n<td>\u53ef\u935b\u6027C2<\/td>\n<td>\u306f\u3044<\/td>\n<td>\u306f\u3044<\/td>\n<\/tr>\n<tr>\n<td>\u30b9\u30c6\u30eb\u30b9\u30d3\u30fc\u30b3\u30f3<\/td>\n<td>\u306f\u3044<\/td>\n<td>\u306f\u3044<\/td>\n<\/tr>\n<tr>\n<td>\u30b3\u30de\u30f3\u30c9\u5c65\u6b74<\/td>\n<td>\u306f\u3044<\/td>\n<td>\u306f\u3044<\/td>\n<\/tr>\n<tr>\n<td>\u6301\u7d9a\u6027<\/td>\n<td>\u306f\u3044<\/td>\n<td>\u306f\u3044<\/td>\n<\/tr>\n<tr>\n<td>\u30e9\u30a4\u30bb\u30f3\u30b9\u5236\u9650<\/td>\n<td>\u306a\u3057<\/td>\n<td>21\u65e5\u9593\u306e\u8a66\u7528\u671f\u9593<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>Cobalt Strike\u306e\u4f7f\u3044\u65b9\u3001\u4f7f\u7528\u306b\u4f34\u3046\u554f\u984c\u3068\u305d\u306e\u89e3\u6c7a\u7b56<\/h2>\n<p><strong>Cobalt Strike\u306e\u4f7f\u3044\u65b9<\/strong>:<\/p>\n<ol>\n<li>\u4fb5\u5165\u30c6\u30b9\u30c8: Cobalt Strike \u306f\u3001\u8106\u5f31\u6027\u3092\u7279\u5b9a\u3057\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5236\u5fa1\u306e\u6709\u52b9\u6027\u3092\u8a55\u4fa1\u3057\u3001\u7d44\u7e54\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4f53\u5236\u3092\u5f37\u5316\u3059\u308b\u305f\u3081\u306b\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5c02\u9580\u5bb6\u3084\u4fb5\u5165\u30c6\u30b9\u30c8\u62c5\u5f53\u8005\u306b\u3088\u3063\u3066\u5e83\u304f\u4f7f\u7528\u3055\u308c\u3066\u3044\u307e\u3059\u3002<\/li>\n<li>\u30ec\u30c3\u30c9 \u30c1\u30fc\u30e0\u6f14\u7fd2: \u7d44\u7e54\u306f Cobalt Strike \u3092\u4f7f\u7528\u3057\u3066\u30ec\u30c3\u30c9 \u30c1\u30fc\u30e0\u6f14\u7fd2\u3092\u5b9f\u884c\u3057\u3001\u5b9f\u969b\u306e\u653b\u6483\u3092\u30b7\u30df\u30e5\u30ec\u30fc\u30c8\u3057\u3066\u9632\u5fa1\u6226\u7565\u306e\u6709\u52b9\u6027\u3092\u30c6\u30b9\u30c8\u3057\u307e\u3059\u3002<\/li>\n<li>\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30c8\u30ec\u30fc\u30cb\u30f3\u30b0: Cobalt Strike \u306f\u3001\u9ad8\u5ea6\u306a\u653b\u6483\u624b\u6cd5\u3084\u9632\u5fa1\u6226\u7565\u306b\u3064\u3044\u3066\u5c02\u9580\u5bb6\u306b\u6559\u3048\u308b\u305f\u3081\u306b\u3001\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30c8\u30ec\u30fc\u30cb\u30f3\u30b0\u3084\u8a8d\u5b9a\u3067\u4f7f\u7528\u3055\u308c\u308b\u3053\u3068\u304c\u3042\u308a\u307e\u3059\u3002<\/li>\n<\/ol>\n<p><strong>\u554f\u984c\u3068\u89e3\u6c7a\u7b56<\/strong>:<\/p>\n<ol>\n<li><strong>\u691c\u51fa<\/strong>: Cobalt Strike \u306e\u9ad8\u5ea6\u306a\u6280\u8853\u306f\u5f93\u6765\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30c4\u30fc\u30eb\u3092\u56de\u907f\u3067\u304d\u308b\u305f\u3081\u3001\u691c\u51fa\u304c\u56f0\u96e3\u3067\u3059\u3002\u7591\u308f\u3057\u3044\u30a2\u30af\u30c6\u30a3\u30d3\u30c6\u30a3\u3092\u7279\u5b9a\u3059\u308b\u306b\u306f\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u3092\u5b9a\u671f\u7684\u306b\u66f4\u65b0\u3057\u3001\u6ce8\u610f\u6df1\u304f\u76e3\u8996\u3059\u308b\u3053\u3068\u304c\u4e0d\u53ef\u6b20\u3067\u3059\u3002<\/li>\n<li><strong>\u60aa\u7528<\/strong>: \u60aa\u610f\u306e\u3042\u308b\u4eba\u7269\u304c Cobalt Strike \u3092\u4e0d\u6b63\u306a\u76ee\u7684\u3067\u4f7f\u7528\u3057\u305f\u4f8b\u304c\u3042\u308a\u307e\u3059\u3002\u3053\u306e\u3088\u3046\u306a\u30c4\u30fc\u30eb\u306e\u914d\u5e03\u3068\u4f7f\u7528\u3092\u53b3\u91cd\u306b\u7ba1\u7406\u3059\u308b\u3053\u3068\u306f\u3001\u60aa\u7528\u3092\u9632\u3050\u305f\u3081\u306b\u975e\u5e38\u306b\u91cd\u8981\u3067\u3059\u3002<\/li>\n<li><strong>\u6cd5\u7684\u5f71\u97ff<\/strong>: Cobalt Strike \u306f\u6b63\u5f53\u306a\u76ee\u7684\u306e\u305f\u3081\u306b\u8a2d\u8a08\u3055\u308c\u3066\u3044\u307e\u3059\u304c\u3001\u4e0d\u6b63\u4f7f\u7528\u306f\u6cd5\u7684\u8cac\u4efb\u306b\u3064\u306a\u304c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u7d44\u7e54\u306f\u3001\u3053\u306e\u30c4\u30fc\u30eb\u3092\u4f7f\u7528\u3059\u308b\u524d\u306b\u3001\u9069\u5207\u306a\u8a31\u53ef\u3092\u5f97\u3066\u3044\u308b\u3053\u3068\u3001\u304a\u3088\u3073\u9069\u7528\u3055\u308c\u308b\u3059\u3079\u3066\u306e\u6cd5\u5f8b\u3068\u898f\u5236\u306b\u6e96\u62e0\u3057\u3066\u3044\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002<\/li>\n<\/ol>\n<h2>\u4e3b\u306a\u7279\u5fb4\u3068\u985e\u4f3c\u7528\u8a9e\u3068\u306e\u6bd4\u8f03<\/h2>\n<p><strong>Cobalt Strike \u5bfe Metasploit<\/strong>:<br \/>\nCobalt Strike \u3068 Metasploit \u306f\u8d77\u6e90\u306f\u4f3c\u3066\u3044\u307e\u3059\u304c\u3001\u76ee\u7684\u306f\u7570\u306a\u308a\u307e\u3059\u3002Metasploit \u306f\u4e3b\u306b\u4fb5\u5165\u30c6\u30b9\u30c8\u306b\u91cd\u70b9\u3092\u7f6e\u3044\u305f\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9 \u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af\u3067\u3059\u304c\u3001Cobalt Strike \u306f\u30a8\u30af\u30b9\u30d7\u30ed\u30a4\u30c8\u5f8c\u306e\u5bfe\u5fdc\u3084\u30ec\u30c3\u30c9 \u30c1\u30fc\u30e0\u306e\u53d6\u308a\u7d44\u307f\u5411\u3051\u306b\u30ab\u30b9\u30bf\u30de\u30a4\u30ba\u3055\u308c\u305f\u5546\u7528\u30c4\u30fc\u30eb\u3067\u3059\u3002Cobalt Strike \u306e GUI \u3068\u30b3\u30e9\u30dc\u30ec\u30fc\u30b7\u30e7\u30f3\u6a5f\u80fd\u306f\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5c02\u9580\u5bb6\u306b\u3068\u3063\u3066\u3088\u308a\u4f7f\u3044\u3084\u3059\u304f\u3001Metasploit \u306f\u3088\u308a\u5e45\u5e83\u3044\u30a8\u30af\u30b9\u30d7\u30ed\u30a4\u30c8\u3068\u30da\u30a4\u30ed\u30fc\u30c9\u3092\u63d0\u4f9b\u3057\u307e\u3059\u3002<\/p>\n<p><strong>\u30b3\u30d0\u30eb\u30c8\u30b9\u30c8\u30e9\u30a4\u30af\u5bfe\u5e1d\u56fd<\/strong>:<br \/>\nEmpire \u306f\u3001Cobalt Strike \u306b\u4f3c\u305f\u3001\u5225\u306e\u30dd\u30b9\u30c8\u30a8\u30af\u30b9\u30d7\u30ed\u30a4\u30c8 \u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af\u3067\u3059\u3002\u305f\u3060\u3057\u3001Empire \u306f\u5b8c\u5168\u306b\u30aa\u30fc\u30d7\u30f3 \u30bd\u30fc\u30b9\u3067\u30b3\u30df\u30e5\u30cb\u30c6\u30a3\u4e3b\u5c0e\u3067\u3042\u308b\u306e\u306b\u5bfe\u3057\u3001Cobalt Strike \u306f\u5c02\u7528\u306e\u958b\u767a\u30c1\u30fc\u30e0\u3092\u6301\u3064\u5546\u7528\u30c4\u30fc\u30eb\u3067\u3059\u3002Empire \u306f\u3001\u30aa\u30fc\u30d7\u30f3 \u30bd\u30fc\u30b9 \u30bd\u30ea\u30e5\u30fc\u30b7\u30e7\u30f3\u3092\u597d\u307f\u3001\u30cb\u30fc\u30ba\u306b\u5408\u308f\u305b\u3066\u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af\u3092\u30ab\u30b9\u30bf\u30de\u30a4\u30ba\u3059\u308b\u5c02\u9580\u77e5\u8b58\u3092\u6301\u3064\u4fb5\u5165\u30c6\u30b9\u30bf\u30fc\u3084\u30ec\u30c3\u30c9 \u30c1\u30fc\u30e0\u306e\u30e1\u30f3\u30d0\u30fc\u306e\u9593\u3067\u4eba\u6c17\u306e\u3042\u308b\u9078\u629e\u80a2\u3067\u3059\u3002\u4e00\u65b9\u3001Cobalt Strike \u306f\u3001\u3088\u308a\u30e6\u30fc\u30b6\u30fc \u30d5\u30ec\u30f3\u30c9\u30ea\u30fc\u306a\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30a4\u30b9\u3092\u5099\u3048\u305f\u3001\u6d17\u7df4\u3055\u308c\u305f\u30b5\u30dd\u30fc\u30c8\u4ed8\u304d\u306e\u30bd\u30ea\u30e5\u30fc\u30b7\u30e7\u30f3\u3092\u63d0\u4f9b\u3057\u307e\u3059\u3002<\/p>\n<h2>\u30b3\u30d0\u30eb\u30c8\u30b9\u30c8\u30e9\u30a4\u30af\u306b\u95a2\u9023\u3059\u308b\u5c06\u6765\u306e\u5c55\u671b\u3068\u6280\u8853<\/h2>\n<p>\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u306e\u8105\u5a01\u304c\u9032\u5316\u3059\u308b\u306b\u3064\u308c\u3001Cobalt Strike \u306f\u4eca\u5f8c\u3082\u9069\u5fdc\u3092\u7d9a\u3051\u3001\u91cd\u8981\u6027\u3092\u7dad\u6301\u3057\u3066\u3044\u304f\u3068\u601d\u308f\u308c\u307e\u3059\u3002\u4eca\u5f8c\u306e\u5c55\u958b\u3068\u3057\u3066\u306f\u3001\u6b21\u306e\u3088\u3046\u306a\u3082\u306e\u304c\u8003\u3048\u3089\u308c\u307e\u3059\u3002<\/p>\n<ol>\n<li><strong>\u5f37\u5316\u3055\u308c\u305f\u56de\u907f\u30c6\u30af\u30cb\u30c3\u30af<\/strong>: \u9ad8\u5ea6\u306a\u653b\u6483\u306e\u691c\u51fa\u306b\u91cd\u70b9\u304c\u7f6e\u304b\u308c\u308b\u306b\u3064\u308c\u3066\u3001Cobalt Strike \u306f\u9ad8\u5ea6\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56\u3092\u56de\u907f\u3059\u308b\u305f\u3081\u306e\u56de\u907f\u6280\u8853\u3092\u3055\u3089\u306b\u958b\u767a\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/li>\n<li><strong>\u30af\u30e9\u30a6\u30c9\u7d71\u5408<\/strong>: \u3088\u308a\u591a\u304f\u306e\u7d44\u7e54\u304c\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u3092\u30af\u30e9\u30a6\u30c9\u306b\u79fb\u884c\u3059\u308b\u306b\u3064\u308c\u3066\u3001Cobalt Strike \u306f\u30af\u30e9\u30a6\u30c9\u30d9\u30fc\u30b9\u306e\u74b0\u5883\u3092\u30bf\u30fc\u30b2\u30c3\u30c8\u306b\u3059\u308b\u3088\u3046\u306b\u9069\u5fdc\u3057\u3001\u30af\u30e9\u30a6\u30c9 \u30b7\u30b9\u30c6\u30e0\u7279\u6709\u306e\u30a8\u30af\u30b9\u30d7\u30ed\u30a4\u30c8\u5f8c\u306e\u30c6\u30af\u30cb\u30c3\u30af\u3092\u6539\u5584\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/li>\n<li><strong>\u81ea\u52d5\u5316\u3055\u308c\u305f\u30ec\u30c3\u30c9\u30c1\u30fc\u30e0<\/strong>Cobalt Strike \u3067\u306f\u3001\u30ec\u30c3\u30c9\u30c1\u30fc\u30e0\u6f14\u7fd2\u3092\u52b9\u7387\u5316\u3059\u308b\u305f\u3081\u306b\u3055\u3089\u306a\u308b\u81ea\u52d5\u5316\u304c\u7d44\u307f\u8fbc\u307e\u308c\u3001\u8907\u96d1\u306a\u653b\u6483\u30b7\u30ca\u30ea\u30aa\u3092\u52b9\u7387\u7684\u306b\u30b7\u30df\u30e5\u30ec\u30fc\u30c8\u3057\u3084\u3059\u304f\u306a\u308a\u307e\u3059\u3002<\/li>\n<\/ol>\n<h2>\u30d7\u30ed\u30ad\u30b7\u30b5\u30fc\u30d0\u30fc\u306e\u4f7f\u7528\u65b9\u6cd5\u3084Cobalt Strike\u3068\u306e\u95a2\u9023\u4ed8\u3051\u65b9\u6cd5<\/h2>\n<p>\u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u306f\u3001Cobalt Strike \u306e\u6d3b\u52d5\u306b\u304a\u3044\u3066\u91cd\u8981\u306a\u5f79\u5272\u3092\u679c\u305f\u3059\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u653b\u6483\u8005\u306f\u591a\u304f\u306e\u5834\u5408\u3001\u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u3092\u4f7f\u7528\u3057\u3066\u81ea\u5206\u306e\u672c\u5f53\u306e\u8eab\u5143\u3068\u5834\u6240\u3092\u96a0\u3057\u3001\u9632\u5fa1\u5074\u304c\u653b\u6483\u5143\u3092\u8ffd\u8de1\u3059\u308b\u3053\u3068\u3092\u56f0\u96e3\u306b\u3057\u307e\u3059\u3002\u3055\u3089\u306b\u3001\u30d7\u30ed\u30ad\u30b7\u306f\u30d5\u30a1\u30a4\u30a2\u30a6\u30a9\u30fc\u30eb\u3084\u305d\u306e\u4ed6\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5236\u5fa1\u3092\u30d0\u30a4\u30d1\u30b9\u3059\u308b\u305f\u3081\u306b\u4f7f\u7528\u3055\u308c\u308b\u305f\u3081\u3001\u653b\u6483\u8005\u306f\u76f4\u63a5\u9732\u51fa\u3059\u308b\u3053\u3068\u306a\u304f\u5185\u90e8\u30b7\u30b9\u30c6\u30e0\u306b\u30a2\u30af\u30bb\u30b9\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3059\u3002<\/p>\n<p>Cobalt Strike \u3092\u4f7f\u7528\u3057\u3066\u30ec\u30c3\u30c9\u30c1\u30fc\u30e0\u6f14\u7fd2\u3084\u4fb5\u5165\u30c6\u30b9\u30c8\u6f14\u7fd2\u3092\u5b9f\u65bd\u3059\u308b\u5834\u5408\u3001\u653b\u6483\u8005\u306f\u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u3092\u4ecb\u3057\u3066\u901a\u4fe1\u3059\u308b\u3088\u3046\u306b Beacon \u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u3092\u69cb\u6210\u3057\u3001\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u3092\u52b9\u679c\u7684\u306b\u533f\u540d\u5316\u3057\u3001\u691c\u51fa\u3092\u56f0\u96e3\u306b\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002<\/p>\n<p>\u305f\u3060\u3057\u3001\u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u3092\u60aa\u610f\u306e\u3042\u308b\u76ee\u7684\u3067\u4f7f\u7528\u3059\u308b\u3053\u3068\u306f\u9055\u6cd5\u3067\u3042\u308a\u3001\u975e\u502b\u7406\u7684\u3067\u3042\u308b\u3053\u3068\u306b\u6ce8\u610f\u3059\u308b\u3053\u3068\u304c\u91cd\u8981\u3067\u3059\u3002\u7d44\u7e54\u306f\u3001\u9069\u5207\u306a\u8a31\u53ef\u3092\u5f97\u3066\u3001\u9069\u7528\u3055\u308c\u308b\u3059\u3079\u3066\u306e\u6cd5\u5f8b\u3068\u898f\u5236\u306b\u6e96\u62e0\u3057\u3066\u306e\u307f\u3001Cobalt Strike \u304a\u3088\u3073\u95a2\u9023\u30c4\u30fc\u30eb\u3092\u4f7f\u7528\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<h2>\u95a2\u9023\u30ea\u30f3\u30af<\/h2>\n<p>Cobalt Strike \u306e\u8a73\u7d30\u306b\u3064\u3044\u3066\u306f\u3001\u6b21\u306e\u30ea\u30bd\u30fc\u30b9\u3092\u53c2\u7167\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n<ol>\n<li><a href=\"https:\/\/www.cobaltstrike.com\/\" target=\"_new\" rel=\"noopener nofollow\">\u30b3\u30d0\u30eb\u30c8\u30b9\u30c8\u30e9\u30a4\u30af\u516c\u5f0f\u30b5\u30a4\u30c8<\/a><\/li>\n<li><a href=\"https:\/\/www.cobaltstrike.com\/help-cobalt-strike\" target=\"_new\" rel=\"noopener nofollow\">Cobalt Strike \u30c9\u30ad\u30e5\u30e1\u30f3\u30c8<\/a><\/li>\n<li><a href=\"https:\/\/github.com\/cobaltstrike\" target=\"_new\" rel=\"noopener nofollow\">Cobalt Strike GitHub \u30ea\u30dd\u30b8\u30c8\u30ea<\/a> \uff08\u4f53\u9a13\u7248\u306e\u5834\u5408\uff09<\/li>\n<li><a href=\"https:\/\/blog.cobaltstrike.com\/\" target=\"_new\" rel=\"noopener nofollow\">\u30e9\u30d5\u30a1\u30a8\u30eb\u30fb\u30de\u30c3\u30b8\u306e\u30d6\u30ed\u30b0<\/a><\/li>\n<\/ol>\n<p>Cobalt Strike \u306f\u5f37\u529b\u306a\u30c4\u30fc\u30eb\u3067\u3042\u308a\u3001\u627f\u8a8d\u3055\u308c\u305f\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30c6\u30b9\u30c8\u304a\u3088\u3073\u8a55\u4fa1\u306e\u76ee\u7684\u306b\u306e\u307f\u3001\u8cac\u4efb\u3092\u6301\u3063\u3066\u502b\u7406\u7684\u306b\u4f7f\u7528\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b\u3053\u3068\u306b\u6ce8\u610f\u3057\u3066\u304f\u3060\u3055\u3044\u3002\u3053\u306e\u3088\u3046\u306a\u30c4\u30fc\u30eb\u3092\u8a31\u53ef\u306a\u304f\u60aa\u610f\u3092\u6301\u3063\u3066\u4f7f\u7528\u3059\u308b\u3053\u3068\u306f\u9055\u6cd5\u3067\u3042\u308a\u3001\u53b3\u3057\u3044\u6cd5\u7684\u51e6\u7f70\u306e\u5bfe\u8c61\u3068\u306a\u308a\u307e\u3059\u3002\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30c6\u30b9\u30c8 \u30c4\u30fc\u30eb\u3092\u4f7f\u7528\u3059\u308b\u3068\u304d\u306f\u3001\u5e38\u306b\u9069\u5207\u306a\u627f\u8a8d\u3092\u5f97\u3066\u3001\u6cd5\u5f8b\u306b\u5f93\u3063\u3066\u304f\u3060\u3055\u3044\u3002<\/p>","protected":false},"featured_media":467891,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-476293","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about <mark>Cobalt Strike: A Comprehensive Guide<\/mark>","faq_items":[{"question":"What is Cobalt Strike?","answer":"<p>Cobalt Strike is a powerful penetration testing tool and red teaming framework. It is designed to simulate real-world attack scenarios, allowing security professionals to assess and strengthen their organization's defenses.<\/p>"},{"question":"How did Cobalt Strike originate?","answer":"<p>Cobalt Strike was developed by Raphael Mudge and was first released in 2012. It evolved from Armitage, a Metasploit front-end, to enhance post-exploitation capabilities and collaboration in red teaming exercises.<\/p>"},{"question":"What are the main components of Cobalt Strike?","answer":"<p>The main components of Cobalt Strike include Beacon, C2 Server, Team Server, and Malleable C2. Beacon is a lightweight agent used for communication with compromised systems, while the C2 Server manages the communication and commands between the operator and the agents.<\/p>"},{"question":"How does Cobalt Strike work?","answer":"<p>Cobalt Strike operates on a client-server model. The operator interacts with the GUI client to issue commands to the Beacon agents deployed on compromised systems. The C2 server acts as a central communication hub, facilitating coordination between the attacker and compromised hosts.<\/p>"},{"question":"What are the key features of Cobalt Strike?","answer":"<p>Cobalt Strike offers a Social Engineering Toolkit, Malleable C2 for obfuscating traffic, post-exploitation modules, and red team collaboration via the Team Server. It also supports persistence techniques for maintaining access to compromised systems.<\/p>"},{"question":"What are the types of Cobalt Strike editions available?","answer":"<p>Cobalt Strike is available in two editions: Professional and Trial. The Professional edition is the fully-featured version for legitimate use, while the Trial edition offers limited access and is free to explore.<\/p>"},{"question":"How can Cobalt Strike be used?","answer":"<p>Cobalt Strike is commonly used for penetration testing, red teaming, and cybersecurity training purposes. It helps organizations identify vulnerabilities and test their defensive strategies.<\/p>"},{"question":"What are the future perspectives for Cobalt Strike?","answer":"<p>In the future, Cobalt Strike may enhance evasion techniques, integrate with cloud environments, and introduce more automation for red teaming exercises.<\/p>"},{"question":"How can proxy servers be associated with Cobalt Strike?","answer":"<p>Proxy servers can be used with Cobalt Strike to anonymize traffic and bypass security controls, making detection more challenging. However, it is crucial to use proxy servers ethically and legally, with proper authorization.<\/p>"},{"question":"Where can I find more information about Cobalt Strike?","answer":"<p>For more information about Cobalt Strike, you can visit the official website at <a href=\"http:\/\/www.cobaltstrike.com\" target=\"_new\">www.cobaltstrike.com<\/a>. You can also explore the documentation, GitHub repository, and blog of the creator, Raphael Mudge, for additional insights.<\/p>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/wiki\/476293","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/wiki\/476293\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/media\/467891"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/media?parent=476293"}],"curies":[{"name":"\u3046\u30fc\u3093","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}