Red Team Posted on November 17, 2021 (June 6, 2022) Nanodump: A Red Team Approach to Minidumps Motivation It is known that dumping Windows credentials is a technique often utilized for everyday attacks by adversaries and, consequently, Red Teamers. This process has Read More
Red Team Posted on November 2, 2021 (May 4, 2022) Create a proxy DLL with artifact kit DLL attacks (hijacking, proxying, etc) are a challenge defenders must face. They can be leveraged in a Red Team engagement to help measure these defenses. Read More
Scripting Posted on October 13, 2021 (May 2, 2022) Cobalt Strike Sleep Python Bridge This project started after seeing how the user community tweaks and tunes Cobalt Strike. I was inspired by @BinaryFaultline and @Mcgigglez16 in their project https://github.com/emcghee/PayloadAutomation Read More
Red Team Posted on September 13, 2021 (May 17, 2022) How to Extend Your Reach with Cobalt Strike We’re often asked, “what does Cobalt Strike do?” In simple terms, Cobalt Strike is a post-exploitation framework for adversary simulations and Red Teaming to help Read More
Development Posted on August 11, 2021 (May 3, 2022) TeamServer.prop Following the 4.4 release, you may have noticed a warning message when starting your teamserver: The missing file is optional and its absence does not Read More
Announcements Posted on August 6, 2021 (October 24, 2022) Introducing Cobalt Strike Community Kit What is Community Kit? Cobalt Strike is a post-exploitation framework designed to be extended and customized by the user community. Several excellent tools and scripts Read More
Announcements, Development Posted on August 4, 2021 (November 29, 2022) Cobalt Strike 4.4: The One with the Reconnect Button Cobalt Strike 4.4 is now available. This release puts more control into your hands, improves Cobalt Strike’s evasive qualities and addresses a number of smaller Read More
Development Posted on August 4, 2021 (May 3, 2022) Cobalt Strike DoS Vulnerability (CVE-2021-36798) SentinelOne discovered a denial of service (DoS) vulnerability in Cobalt Strike. The bug (aka Hotcobalt) can cause a denial of service on a teamserver by Read More
Scripting Posted on July 29, 2021 (May 2, 2022) Introducing Mimikatz Kit You can now update Mimikatz between Cobalt Strike releases. Updates will periodically be made available to licensed users via the Arsenal as the Mimikatz Kit. Read More
Red Team, Scripting Posted on July 13, 2021 (September 28, 2022) CredBandit (In memory BOF MiniDump) – Tool review – Part 1 One of the things I find fascinating about being on the Cobalt Strike team is the community. It is amazing to see how people overcome Read More
