Development Posted on March 29, 2023 (March 29, 2023) Cobalt Strike 2023 Roadmap and Strategy Update I blogged about the Cobalt Strike roadmap in March last year and while the fundamental tenets of our approach to R&D remain unaltered, a lot Read More
Development, Red Team Posted on March 15, 2023 (March 16, 2023) Revisiting the User-Defined Reflective Loader Part 1: Simplifying Development This blog post accompanies a new addition to the Arsenal Kit – The User-Defined Reflective Loader Visual Studio (UDRL-VS). Over the past few months, we Read More
Development, Releases Posted on March 7, 2023 (March 7, 2023) Cobalt Strike 4.8: (System) Call Me Maybe Cobalt Strike 4.8 is now available. This release sees support for system calls, options to specify payload guardrails, a new token store, and more. We Read More
Development, Red Team Posted on February 13, 2023 (April 26, 2023) Behind the Mask: Spoofing Call Stacks Dynamically with Timers This blog introduces a PoC technique for spoofing call stacks using timers. Prior to our implant sleeping, we can queue up timers to overwrite its Read More
Development, Releases Posted on October 17, 2022 (October 24, 2022) Out Of Band Update: Cobalt Strike 4.7.2 Cobalt Strike 4.7.2 is now available. This is an out of band update to fix a remote code execution vulnerability that is rooted in Java Read More
Development, Releases Posted on September 20, 2022 (October 24, 2022) Out Of Band Update: Cobalt Strike 4.7.1 Cobalt Strike 4.7.1 is now available. This is an out of band update to fix an issue discovered in the 4.7 release that was reported Read More
Development, Releases Posted on August 17, 2022 (October 24, 2022) Cobalt Strike 4.7: The 10th Anniversary Edition Cobalt Strike 4.7 is now available. This release sees support for SOCKS5, new options to provide flexibility around how BOFs live in memory, updates to Read More
Announcements, Development Posted on June 21, 2022 (October 24, 2022) Arsenal Kit Update: Thread Stack Spoofing As I mentioned in the recent Roadmap Update blog post, we are in the process of expanding the Cobalt Strike development team and ramping up Read More
Development, Releases Posted on May 23, 2022 (October 24, 2022) Out Of Band Update: Cobalt Strike 4.6.1 Cobalt Strike 4.6.1 is now available. This is an out of band update to fix a few issues that were discovered in the 4.6 release Read More
Development, Releases Posted on April 20, 2022 (October 24, 2022) Cobalt Strike 4.6: The Line In The Sand Cobalt Strike 4.6 is now available. As I mentioned in the recent Roadmap Update blog post, this isn’t a regular release, as it mostly focuses Read More