Resources

Yesterday, one of my customers asked about x64 payloads in Cobalt Strike. Specifically, he wanted to know why Cobalt Strike doesn’t expose them. I’ve already

A user-driven attack is an attack that relies on a feature to get code execution. Most penetration testers I know rely on user-driven attacks over

Some hackers only think about access. It’s the precious. How to get that first shell? I don’t care too much about this. I’m concerned about

James Webb has an interesting blog post on how to use Armitage to manage a pen test through Amazon’s Elastic Computing Cloud. He does a

Following the 4.4 release, you may have noticed a warning message when starting your teamserver: The missing file is optional and its absence does not

TL;DR a certificate for part of the Cobalt Strike update infrastructure changed. Download the 20200511 distribution package to avoid certificate verification errors. If you recently

Cobalt Strike’s process to inject shellcode, via PowerShell, does not work with the latest Windows 10 update (v1803). While it’s possible to work without this

One of my favorite features in Cobalt Strike is its ability to pivot over named pipes. A named pipe is a way for two programs

Joel Spolsky is one of my favorite writers on the topic of software development. He coined a 12-step Joel Test to determine if your company

I wrote Cobalt Strike and I take it for granted that my users know where things are. This doesn’t come from nowhere though. The users