cli4bofs是一款功能强大的BOF文件运行命令行接口工具，在该工具的帮助下，广大研究人员可以在Cobalt Strike Beacon环境之外通过独立的命令行接口工具运行BOF文件。
cli4bofs是一个用于运行和维护BOF文件的多功能工具，支持从目标文件系统运行任何BOF文件，而且还可以方便地向其传递参数。除此之外，该工具还可以为相关BOF文件的基本信息定义简单的YAML模式，例如描述、源代码URL、参数和使用示例等。而且cli4bofs还可以方便地帮助我们开发和测试BOF文件。
常规命令使用
Usage: ./zig-out/bin/cli4bofs command [options]Commands:help <COMMAND> 显示给定命令的帮助信息exec <BOF> 从文件系统执行给定的BOF文件info <BOF> 显示BOF描述和使用样例usage <BOF> 查看调用详细信息和参数类型examples <BOF> 查看BOF使用样例General Options:-c, --collection 提供自定义BOF YAML集合-h, --help 查看工具帮助信息exec子命令使用
Usage: cli4bofs <BOF> [[prefix:]ARGUMENT]...Execute given BOF from filesystem with provided ARGUMENTs.ARGUMENTS:ARGUMENT's data type can be specified using one of following prefix:short OR s - 16位有符号整数int OR i - 32位有符号整数str OR z - 以零结尾的字符串wstr OR Z - 以零结尾的宽字符字符串file OR b - 特殊类型，后跟文件路径，标识将指针（指向用文件内容填充的缓冲区）将传递给BOFIf prefix is ommited then ARGUMENT is treated as a zero-terminated characters string (str / z).cli4bofs uname -acli4bofs udpScanner 192.168.2.2-10:427cli4bofs udpScanner z:192.168.2.2-10:427cli4bofs udpScanner 192.168.2.2-10:427 file:/tmp/udpProbesYAML BOF集合
name: "udpScanner"description: "Universal UDP port sweeper."author: "Z-Labs"tags: ['net-recon']OS: "cross"header: ['thread', 'zib']sources: - 'https://raw.githubusercontent.com/The-Z-Labs/bof-launcher/main/bofs/src/udpScanner.zig'usage: ' udpScanner str:IPSpec[:portSpec] [int:BUF_LEN str:BUF_MEMORY_ADDR]Arguments: str:IPSpec[:portSpec] ex: 192.168.0.1; 10.0.0-255.1-254; 192.168.0.1:161,427,10-15 [int:BUF_LEN] length of UDP probes buffer [str:BUF_MEMORY_ADDR] pointer to the buffer containing one or more UDP probe(s). One probe per line is allowed.UDP probe syntax (with example):<portSpec> <probeName> <hexadecimal encoded probe data>n53,69,135,1761 dnsReq 000010000000000000000000'examples: ' Scanning provided IP range on most common UDP ports with builtin UDP probes: udpScanner str:192.168.0.1-32 Scanning only cherry-picked ports (if no builtin UDP probe for the chosen port is available then length and content of the packet payload will be randomly generated: udpScanner str:192.168.0.1:123,161 udpScanner str:102.168.1.1-128:53,427,137 udpScanner str:192.168.0.1:100-200udpScanner str:192.168.0.1-32 int:BUF_LEN str:BUF_MEMORY_ADDRESScli4bofs exec udpScanner 102.168.1.1-4:161,427 file:/tmp/udpPayloads'$ cli4bofs listunameudpScannerzerologonarp cli4bofs usage udpScannerUsage:udpScanner str:IPSpec[:portSpec] [int:BUF_LEN str:BUF_MEMORY_ADDR]Arguments:str:IPSpec[:portSpec] ex: 192.168.0.1; 10.0.0-255.1-254; 192.168.0.1:161,427,10-15[int:BUF_LEN] UDP探测缓冲区长度[str:BUF_MEMORY_ADDR] 指向包含一个或多个UDP探针的缓冲区<portSpec> <probeName> <hexadecimal encoded probe data>n53,69,135,1761 dnsReq 000010000000000000000000原文始发于微信公众号（FreeBuf）：cli4bofs：一款功能强大的BOF文件运行命令行接口工具
免责声明:文章中涉及的程序(方法)可能带有攻击性，仅供安全研究与教学之用，读者将其信息做其他用途，由读者承担全部法律及连带责任，本站不承担任何法律及连带责任；如有问题可邮件联系(建议使用企业邮箱或有效邮箱,避免邮件被拦截，联系方式见首页)，望知悉。
- 左青龙
- 微信扫一扫
-
- 右白虎
- 微信扫一扫
-
评论