Note: For security research and learning purposes only. If the tool is used for any other purpose, the user shall bear all legal and joint liabilities. The author and publisher assume no legal or joint liability.

Cobalt Strike 4.4 Zhuzhu Edition This version is a pre-release beta version; the public version will be released at the end of May

1. Remove hidden checks
2. Change the authentication header: COOKIE changed to Authentication
3. Change GET request and POST request addresses
4. Use the geacon secondary development version to replace beacon, achieving bypass detection (tested against Huorong, 360). Release expected around the end of May
5. Change to JSON response and request packets
6. CVE-2022-39197 patch
7. Modify JA3 and JA3S fingerprints