直接通过 GetLastError 错误码在 Cobalt Strike 客户端内获取错误消息,无需借助 Google 搜索、net helpmsg 或 Microsoft Error Lookup Tool。错误消息内置于 aggressor 脚本中,无需与 beacon 进行交互。
该 aggressor 脚本由 windows-lasterror-json 文件自动生成并更新。
beacon> ls //does-not-exists/c$
[*] Tasked beacon to list files in //does-not-exists/c$
[+] host called home, sent: 38 bytes
[-] could not open //does-not-exists/c$\*: 53
beacon> get-last-error 53
[*] ERROR_BAD_NETPATH
The network path was not found.