diff --git a/CobaltStrike/cobaltstrike_c2s_2020_to_2023.txt b/CobaltStrike/cobaltstrike_c2s_2020_to_2023.txt index e1e7229..3d31e4f 100644 --- a/CobaltStrike/cobaltstrike_c2s_2020_to_2023.txt +++ b/CobaltStrike/cobaltstrike_c2s_2020_to_2023.txt @@ -27,7 +27,6 @@ http://106.55.180.110:889/jquery-3.3.1.min.js http://43.138.159.166:7777/TxHI http://45.207.9.59:443/jquery-3.3.2.slim.min.js http://149.28.52.16:80/dot.gif -http://100.100.100.2:443/JUmQ http://sync.outlookmicorsoft.com:53/preload http://60.31.184.208:443/jquery-3.3.1.1.min.js http://45.32.26.164:443/lzdvhGR @@ -151,7 +150,6 @@ http://103.123.134.190:443/jquery-1.9.0.min.js http://123.56.97.24:8011/__utm.gif http://212.114.52.88:443/copyright http://v1.officesmicrasftonlinedownload.com:443/85yw -http://:443/jquery-3.3.2.slim.min.js http://zx.wearegoshts.best:443/en http://defendersecyrity.com:443/sitemap.js http://198.13.33.48:8099/activity @@ -235,7 +233,6 @@ http://burmesebleaker.com:8443/cr http://ns8.softline.top:443/s/ref=nb_sb_noss_1/167-3294888-0262949/field-keywords=books http://154.90.57.70:9900/updates.rss http://180.76.110.228:80/ptj -http://at.alicdn.com:443/geo/collect/v1 http://ntueventscdn.afd.azureedge.net:443/OneCollector/1.0/ http://8.218.203.72:8443/g.pixel http://107.174.144.153:9002/updates.rss @@ -371,7 +368,6 @@ http://onlineceoshelp.com:8080/jquery-3.2.2.min.js http://do.skype.com:80/jquery-3.3.1.min.js http://microsoft.systeminnfo.workers.dev:443/jquery-3.3.1.min.js http://39.105.223.243:6666/pH6o -http://g.alicdn.com:443/web/v3/static/js/html5shiv-21fc8c2ba8.js http://27.221.72.135:443/jquery-3.3.1.min.js http://5.199.162.220:80/ki http://bgp-firmware.com:757/search.css @@ -790,7 +786,6 @@ http://www.menshealth.co.uk:443/safebrowsing/fp/XqhKLOYnlfXJxJXouv2hRVGJBxDepikZ http://101.35.141.80:8443/ga.js http://cs.sertisoc.ca:8888/ca http://45.227.255.152:443/lVb9 -http://0x000000b9.0x46b855:845/Recite/v5.12/K6200E3AC http://updatemaster.info:443/pixel.gif http://wgfd.wyo.gov:80/tab_home http://167.86.87.27:50443/wp-includes/mg.gif @@ -1384,7 +1379,6 @@ http://103.214.173.42:8765/Rpc http://1.193.146.35:80/api/getit http://vnuret.com:443/image-directory/fam_cart.jpg http://af.hungrrybaby.com:443/jp -http://1.1.1.1:800/CdPf http://104.31.68.190:80/IE9CompatViewList.xml http://103.85.189.58:1799/j.ad http://guvonuk.com:443/static-directory/bn.png @@ -1776,7 +1770,6 @@ http://monapol.com:443/image-directory/case.png http://69.12.73.177:6666/updates.rss http://47.92.175.150:4343/djNA http://81.68.136.116:80/XbMV -http://www.nytimes.com:443/vi-assets/static-assets http://www.msclientweb.com:443/s/ref=nb_sb_noss_1/167-3294888-0262949/field-keywords=books http://159.65.47.181:8080/en_US/all.js http://47.100.55.126:50001/pixel @@ -1860,7 +1853,6 @@ http://8.130.122.132:1222/P4lm http://cs-test-kfpgzagtyx.cn-hangzhou.fcapp.run:443/static/js/jquery3.2.1.js http://47.93.245.202:80/IE9CompatViewList.xml http://139.180.198.9:55443/g.pixel -http://a0.awsstatic.com:80/__utm.gif http://cloudflare-ko.biguserup.workers.dev:443/lv http://43.142.138.251:8000/eUaB http://45.130.147.247:876/en_US/all.js @@ -1877,7 +1869,6 @@ http://43.138.168.61:17002/jquery-3.3.1.min.js http://summerevent.webhop.net:443/safebrowsing/rd/tnOztRgLx1ugKt8uumGcreRFm5CqXD9ge-zzz5sA6WzhC http://42.192.152.182:5566/Uj8f http://kingoflake.com:443/wp-content/chunky/ -http://ecnads1.msn.com:443/en-us/store/api/checkproductinwishlist http://bxssd.eu.org:443/jquery-3.3.2.slim.min.js http://110.10.179.213:8088/IE9CompatViewList.xml http://199.21.112.14:53/j.ad @@ -1998,7 +1989,6 @@ http://blog.chat5l88.com:443/image/ http://82.157.161.99:1001/dpixel http://111.48.85.24:443/imgs/flexible/logo/pc/result.png http://162.14.69.24:804/imgs/flexible/logo/pc/result.png -http://nytimes.com:443/en-us/p/onerf/MeSilentPassport http://43.139.140.135:80/match http://47.100.244.87:1234/push http://152.32.216.182:80/load @@ -2172,7 +2162,6 @@ http://212.8.249.250:443/oscp/ http://43.139.173.236:8889/iWHU http://service-0dacxgh1-1310046338.bj.apigw.tencentcs.com:443/s http://58.53.128.27:6001/en_US/all.js -http://www.nytimes.com:443/v1/preferences http://pnt.data-akamai.com:80/push http://47.87.199.95:8080/b6Zk http://119.3.164.228:443/jquery-fuckfuck.1.min.js @@ -2303,13 +2292,11 @@ http://124.222.166.63:44332/j.ad http://159.89.194.250:8088/jquery-3.3.1.min.js http://1.13.154.164:9443/access/sso/ http://101.200.79.222:443/api/getit -http://finance.china.com:80/socialapiVersion=2.0 http://customsecurityusa.com:787/ab http://service-ogf120ck-1300456157.nj.apigw.tencentcs.com:443/www/handle/doc http://ty.realgamess.com:443/massaction http://185.224.169.210:8087/g.pixel http://89.41.182.140:443/cx -http://\n\t\t\n\t\tcdn.static.ettiao.com:443/s/ref=nb_sb_noss_1/167-3294888-0262949/field-keywords=books http://stylesam.com:443/us/ky/louisville/312-s-fourth-st.html http://182.61.25.218:23456/ASde http://140.249.61.183:443/static/superman/img/topnav/baiduyun.png @@ -2915,7 +2902,6 @@ http://api.yelp.com:443/mail/u/0/#inbox http://remakeflowersimple.com:443/en.css http://47.102.122.197:9999/q2Iq http://38.54.125.52:80/aUZM -http://www.nytimes.com:443/idcta/translations http://mondayop.com:443/access/ http://111.30.142.152:443/c/msdownload/update/others/2021/10/29136388_ http://128.199.163.49:80/j.ad @@ -2957,7 +2943,6 @@ http://47.96.152.43:443/center/update_ http://121.4.39.110:8081/dpixel http://kl.gtrsqer.com:443/media http://images5.c9z.in:443/index.php -http://img.alicdn.com:443/geo/collect/v1 http://122.9.157.122:800/__utm.gif http://124.221.39.11:80/__utm.gif http://sslvpn.uocdn.com:443/jquery/2.0.1/jquery @@ -3172,7 +3157,6 @@ http://hamazem.com:443/files/zh.png http://148.70.32.190:6646/activity http://imolaoggi.eu:443/s/8i2yvRDQwJpiAp182xPg3g74hAkOxf/field-keywords/ http://121.4.62.215:1521/6ZwV -http://1.1.1.1:80/jquery-3.3.1.min.js http://36.131.221.241:443/jquery-3.3.1.min.js http://54.93.165.205:443/IE9CompatViewList.xml http://93.113.131.116:443/dot.gif @@ -3541,7 +3525,6 @@ http://49.233.137.7:3321/ptj http://165.154.130.222:4444/match http://198.46.159.168:8878/jquery-3.3.2.slim.min.js http://122.193.130.74:443/login -http://;lĀ�\x0e��o�\x05,5T\x14���Q-\x10aU;�8����:7��.��Ey¦\x0f�\x0bPE:3882855137E http://67.205.136.246:80/en_US/all.js http://8.130.66.2:8192/_/scs/mail-static/_/js/ http://qw.popitsingleplayerunknown.com:443/extension.css @@ -3775,7 +3758,6 @@ http://service-4xrjz1wg-1253795072.gz.apigw.tencentcs.com:443/api/auth/v1/log http://122.228.0.169:80/updates.rss http://103.234.72.127:80/metro91/admin/1/ppptp.jpg http://layout.globalcngf.ru:443/statistic/finishtask -http://00000077.0x0000000fa35b4:845/produce/subscribe/2DOC08VNCJ6 http://212.237.9.168:46876/IE9CompatViewList.xml http://www.fzupdate.com:443/logo64x64.gif http://web.symanteccdn.com:53/_/scs/mail-static/_/js/ @@ -3837,7 +3819,6 @@ http://202.95.15.23:8333/jquery-3.3.1.min.js http://tarentamar.com:80/access/ http://www.cluodfeare.com:443/__utm.gif http://96.44.166.183:80/en_US/all.js -http://0x142f6ca3:443/munchkin.js http://217.69.0.246:8081/IE9CompatViewList.xml http://185.80.92.4:9696/match http://1.15.140.129:8787/dot.gif @@ -3932,7 +3913,6 @@ http://englishteea.com:443/match http://123.60.165.221:443/cHGk http://103.255.176.110:443/updates.rss http://124.222.220.126:80/admin/login -http://0x142f6ca3:443/images/IT_Showcase_Webinar_Security_3000x300.jpg http://cv.myobtain.com:443/default http://mndacdt.monster:2096/duS1 http://d1a4ibo8xvqvtz.cloudfront.net:80/wp06/wp-includes/po.php @@ -4047,7 +4027,6 @@ http://surnbuithe.com:80/j.ad http://global.cdn-global-jsdelivr.com:8443/jquery-3.3.1.min.js http://218.253.251.74:443/modcp.html http://telegram.onlineobl.com:443/cx -http://1.1.1.1:53/fwlink http://18.183.246.111:50001/IE9CompatViewList.xml http://ghafirst.com:443/RELEASES http://34.217.20.236:80/match @@ -4172,7 +4151,6 @@ http://52.15.81.204:80/mJRT http://krinsop.com:443/jquery-3.3.2.slim.min.js http://45.32.118.102:80/match http://smadst.com:443/fo -http://eln.meizu.com:80/api/v3/check http://43.138.198.123:443/jquery-3.3.2.slim.min.js http://DailyHealthGuide.org:443/jquery-3.3.1.min.js http://45.77.177.84:80/maps/overlaybfpr @@ -4370,7 +4348,6 @@ http://124.221.219.55:4433/jquery-3.3.1.min.js http://admin.yelp.ca:443/Collect/union/QXMY8BHNIPH7 http://139.196.166.183:4447/j.ad http://120.27.246.242:5599/ECat -http://a0.awsstatic.com:80/ http://service-lyemd3y8-1302461797.gz.apigw.tencentcs.com:80/api/x http://185.225.73.238:443/doFor/v6.29/N0UYA064Z4 http://149.202.154.160:443/updates.rss @@ -4473,7 +4450,6 @@ http://systemtime.org:443/case http://174.78.25.231:443/match http://45.152.64.178:8014/j.ad http://5.189.184.60:443/panel.html -http://www.nytimes.com:443/access/ http://59.49.91.172:80/news/apich/ http://jetkeep.com:443/mg http://23.106.122.245:443/fwlink @@ -4672,7 +4648,6 @@ http://jquery.updataxml.ga:443/jquery-3.3.2.slim.min.js http://155.94.163.74:8086/jquery-3.3.1.min.js http://ptdsbase-443.global.ssl.fastly.net:443/c/msdownload/update/others/2019/12/OqHTw2AZT-qOW4SW-i5S2Vn http://104.243.23.144:443/jquery-3.3.2.slim.min.js -http://\n150.138.180.242:443/jquery-3.3.1.min.js http://47.91.237.42:8443/__utm.gif http://gf.topbackupintheworld.com:443/admin http://service-hgstg4de-1258693037.gz.apigw.tencentcs.com:80/api/x @@ -4752,7 +4727,6 @@ http://93.113.131.162:443/cx http://78.128.113.14:443/ca http://www.githup.cf:443/__utm.gif http://114.55.36.76:80/images/logo.png -http://100.100.100.2:443/jquery-3.3.2.slim.min.js http://fuckersss6al9.b1.aicdn.com:80/owa/ http://172.86.122.207:443/lv.css http://193.233.48.38:3800/access/ @@ -4946,7 +4920,6 @@ http://timezone.api.chinabm.cn:80/push http://106.54.228.198:7452/www/handle/doc http://144.91.119.150:443/components/RELEASE.png http://securesphere.global.ssl.fastly.net:443/edgedl/release2 -http://a0.awsstatic.com:443/s/ref=nb_sb_noss_1/167-3294888-0262949/field-keywords=books http://162.244.80.46:80/copyright.js http://introwebsites.com:1443/lt http://134.122.132.23:8899/updates.rss @@ -5011,7 +4984,6 @@ http://Jae3Faita9jeiMeiVeiv.cantusethis.site:443/gifs/ http://104.31.69.190:80/__utm.gif http://microsoftmservices.com:8443/preload http://bidevazomu.com:443/ro -http://www.nytimes.com:443/v2/preferences http://45.129.2.67:80/jquery-3.3.1.min.js http://43.139.114.134:8081/jquery-3.3.1.min.js http://95.141.41.29:401/ga.js @@ -5263,7 +5235,6 @@ http://45.77.173.124:443/cm http://95.141.41.29:401/cx http://joinc2.net:80/s/ref=nb_sb_noss_1/167-3294888-0262949/field-keywords=books http://service-g49c67zf-1259700459.bj.apigw.tencentcs.com:80/bootstrap-2.min.js -http://finance.china.com:80/socialapiVersion=1.1 http://146.56.42.196:8001/load http://165.154.130.222:4444/cx http://fashmie.com:443/assets/environment-f0a84e0c1.js