Enhance Security and Incident Response
- Emulate a quiet long-term embedded actor with post-exploitation agents and covert channels
- Change network indicators to look like different malware
- Replicate the tactics and techniques of an advanced adversary in a network
Get started with Cobalt Strike by filling out the form below.
Cobalt Strike Features
Reconnaissance
Cobalt Strike’s system profiler discovers which client-side applications your target uses, with version information.
Post Exploitation
Beacon is Cobalt Strike’s payload to model an advanced actor. Beacon executes PowerShell scripts, logs keystrokes, takes screenshots, downloads files, and spawns other payloads.
Spear phishing
Import a message and let Cobalt Strike replace links and text to build a convincing phish for you. Cobalt Strike sends email and tracks who clicks.
Attack Packages
Use Cobalt Strike to host a web drive-by attack or transform an innocent file into a trojan horse.
Covert Communication
Beacon’s network indicators are malleable. Load a C2 profile to look like another actor. Use HTTP, HTTPS, and DNS to egress a network. Use named pipes to control Beacons, peer-to-peer, over the SMB protocol.
Browser Pivoting
Use a Browser Pivot to go around two-factor authentication and access sites as your target.
About Cobalt Strike
Raphael Mudge created Cobalt Strike in 2012 to enable threat-representative security tests. Cobalt Strike was one of the first public red team command and control frameworks. In 2020, Fortra (the new face of HelpSystems) acquired Cobalt Strike to add to its Core Security portfolio and pair with Core Impact. Today, Cobalt Strike is the go-to red team platform for many U.S. government, large business, and consulting organizations.