cobalt-strike/unhook-bofRemove API hooks from a Beacon process.
这是一个用于刷新 DLL 并移除其钩子的 Beacon 对象文件。该代码源自 Cylance 的 Universal Unhooking 研究：
https://blogs.blackberry.com/en/2017/02/universal-unhooking-blinding-security-software
使用方法：
通过 Cobalt Strike -> Script Manager 将 unhook.cna 加载到 Cobalt Strike 中
在 Beacon 中运行 'unhook'
构建方法：
make
本项目衍生自：
Reflective DLL Injection BSD 3-Clause License Copyright (c) 2011, Stephen Fewer of Harmony Security (www.harmonysecurity.com) https://github.com/stephenfewer/ReflectiveDLLInjection
ReflectiveDLLRefresher BSD 3-Clause License Copyright (c) 2017, Cylance Inc. https://github.com/CylanceVulnResearch/ReflectiveDLLRefresher
Unhook Meterpreter Extension BSD-3-Clause License 2006-2018, Rapid7, Inc. https://github.com/rapid7/metasploit-payloads/commits/master/c/meterpreter/source/extensions/unhook
