Features | Beacon, C2 Profiles, Attack Packages, and More | Cobalt Strike

Features

Cobalt Strike is threat emulation software. Execute targeted attacks against modern enterprises with one of the most powerful network attack kits available to penetration testers. This is not compliance testing.


reconnaissance

Reconnaissance

Cobalt Strike’s system profiler discovers which client-side applications your target uses, with version information.

post exploitation

Post Exploitation

Beacon is Cobalt Strike’s payload to model an advanced actor. Beacon executes PowerShell scripts, logs keystrokes, takes screenshots, downloads files, and spawns other payloads.


covert-communication

Covert Communication

Beacon’s network indicators are malleable. Load a C2 profile to look like another actor. Use HTTP, HTTPS, and DNS to egress a network. Use named pipes to control Beacons, peer-to-peer, over the SMB protocol.

attack-packages

Attack Packages

Use Cobalt Strike to host a web drive-by attack or transform an innocent file into a trojan horse.


spear-phishing

Spear phishing

Import a message and let Cobalt Strike replace links and text to build a convincing phish for you. Cobalt Strike sends email and tracks who clicks.

browser-pivoting

Browser Pivoting

Use a Browser Pivot to go around two-factor authentication and access sites as your target.


collaboration

Collaboration

Connect to a Cobalt Strike team server to share data, communicate in real-time, and control systems compromised during the engagement.

reporting-and-logging

Reporting and Logging

Cobalt Strike’s reports provide a timeline and a list of indicators from red team activity. These reports are made to benefit our peers in security operations. Cobalt Strike exports reports as both PDF and MS Word documents.


centralized-toolset-cs-icons-116x116

Interoperability

Use Cobalt Strike in tandem with pen testing software, Core Impact to extend the reach of your engagements. Beacon can be deployed from either tool for session passion and tunneling capabilities.

Flexibility

In addition to modifying attack kits, further tailor Cobalt Strike’s framework with extensions from the Community Kit, a central repository with both tools and scripts written by users.