en
Feedback
cobaltstrike

cobaltstrike

Open in Telegram

All about Cobalt Strike. New versions, articles and more.

Show more
The country is not specifiedTechnologies & Applications42 376
1 682
Subscribers
No data24 hours
No data7 days
No data30 days
Posts Archive
Sophos Managed Threat Response Team detectó y respondió recientemente a una campaña de Zloader que entregó CobaltStrike e instaló Atera Agent para acceso remoto permanente: https://news.sophos.com/es-es/2022/01/24/zloader-instala-puertas-traseras-de-acceso-remoto-y-cobalt-strike/

collection of scripts for Cobalt Strike https://github.com/SamSepiolProxy/CobaltStrikeScripts

Writing Beacon Object Files: Flexible, Stealthy, and Compatible https://www.cobaltstrike.com/blog/writing-beacon-object-files-flexible-stealthy-and-compatible/

Cobalt Strike External C2 Integration With Azure Servicebus, C2 traffic via Azure Servicebus https://github.com/Flangvik/CobaltBus

Minimal Cobalt Strike C2 Profile for Bypassing Defender https://gist.github.com/tothi/8abd2de8f4948af57aa2d027f9e59efe

SourcePoint v2.1 releases: polymorphic C2 profile generator for Cobalt Strike C2s https://securityonline.info/sourcepoint-polymorphic-c2-profile-generator-for-cobalt-strike-c2s/

Russian Hackers Heavily Using Malicious Traffic Direction System to Distribute Malware https://thehackernews.com/2022/01/russian-hackers-heavily-using-malicious.html

Extracting clear-text passwords from VeraCrypt.exe using API hooking https://github.com/snovvcrash/VeraCryptThief

Attackers are abusing MSBuild to evade defenses and implant Cobalt Strike beacons https://morphuslabs.com/attackers-are-abusing-msbuild-to-evade-defenses-and-implant-cobalt-strike-beacons-edac4ab84f42

Nim implementation of Process Hollowing using syscalls (PoC) https://github.com/snovvcrash/NimHollow

ArtifactKit There is no licensed Cobalt Strike property within this repository. https://github.com/NotMedic/ArtifactKit

Cobaltstrike addons to interact with clipboard https://github.com/DallasFR/Cobalt-Clip