cobaltstrike

Like Cobalt Strike, but hate having to manage download locations? Want to keep the parent path and integrity? Want to prevent clobbering? Cross-platform support? Needle searching? Selective overwriting? Current Beacon's downloads vs. all? https://github.com/EspressoCake/BeaconDownloadSync

Cobalt Strike Beacon Object Files (Updated) https://github.com/guervild/BOFs

Understanding Cobalt Strike Profiles - Updated for Cobalt Strike 4.6 https://blog.zsec.uk/cobalt-strike-profiles/

Introducing RunOF – Arbitrary BOF tool https://labs.nettitude.com/blog/introducing-runof-arbitrary-bof-tool/

Things related to Cobalt Strike https://github.com/rbctee/CobaltStrike

A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques. https://github.com/outflanknl/C2-Tool-Collection

Cobalt Strike 4.6: The Line In The Sand https://www.cobaltstrike.com/blog/cobalt-strike-4-6-the-line-in-the-sand/

A spin-off research project. Cobalt Strike x Notion collab 2022 https://github.com/HuskyHacks/CobaltNotion

Automating EDR Testing with reference to MITRE ATTACK via Cobalt Strike [Purple Team]. https://github.com/TH3xACE/EDR-Test

Phishing campaign targets Russian govt dissidents with Cobalt Strike https://www.bleepingcomputer.com/news/security/phishing-campaign-targets-russian-govt-dissidents-with-cobalt-strike/

Cobalt Strike: Overview – Part 7 https://blog.nviso.eu/2022/03/22/cobalt-strike-overview-part-7/

Miss those day when shikataganai is enough to bypass AV

Open Dataset of Cobalt Strike Beacon metadata (2018-2022) https://github.com/fox-it/cobaltstrike-beacon-data

Article about Cobalt strike beacon and how versions change https://research.nccgroup.com/2022/03/25/mining-data-from-cobalt-strike-beacons/

Python library for dissecting and parsing Cobalt Strike related data such as Beacon payloads and Malleable C2 Profiles https://github.com/fox-it/dissect.cobaltstrike

Useful Cobalt Strike BOFs found or used during engagements https://github.com/wsummerhill/CobaltStrike_BOF_Collections

Conti Affiliate Exposed: New Domain Names, IP Addresses and Email Addresses Uncovered https://www.esentire.com/blog/conti-affiliate-exposed-new-domain-names-ip-addresses-and-email-addresses-uncovered-by-esentire

Cobalt Strike Analysis and Tutorial: How Malleable C2 Profiles Make Cobalt Strike Difficult to Detect https://unit42.paloaltonetworks.com/cobalt-strike-malleable-c2-profile/