Resources

The Sleep Mask Kit was first introduced in Cobalt Strike 4.4 to allow users to modify how the sleep mask function looks in memory in order to defeat static signatures that identified Beacon. This

Blog

Situational Awareness for Meterpreter Users

Hacking involves managing a lot of contextual factors at one time. Most times, the default situation works and a tool will perform beautifully for you.

Blog

Simplifying BOF Development: Debug, Test, and Save Your B(e)acon

Beacon Object Files (BOFs) were introduced in Cobalt Strike 4.1 in 2020. Since their release, BOFs have played a key role in post-exploitation activities, surpassing

Blog

Simple DNS Redirectors for Cobalt Strike

This post, from Ernesto Alvarez Capandeguy of Core Security’s CoreLabs Research Team, describes techniques used for creating UDP redirectors for protecting Cobalt Strike team servers.

Events and Webinars

ShowMeCon 2025

Come see us at Showmecon! Ameristar Casino & Resort One Ameristar Blvd., St. Charles, MO, 63301 US [...]Read More... from ShowMeCon 2025

Blog

Session Passing from Cobalt Strike

Session passing is using one payload to spawn another payload. Sometimes, the payloads are from the same toolset. Other times, they’re not. Session passing options

Events and Webinars

Secure 360 Conference 2026

Secure360 has become the go‑to conference for professionals seeking well‑rounded education, collaboration, and fresh insights across the security and risk landscape. This event brings together