Cobalt Strike 3

What is Cobalt Strike?

Cobalt Strike is software for Adversary Simulations and Red Team Operations.

What are Adversary Simulations and Red Team Operations?

Adversary Simulations and Red Team Operations are security assessments that replicate the tactics and techniques of an advanced adversary in a network. While penetration tests focus on unpatched vulnerabilities and misconfigurations, these assessments benefit security operations and incident response.

Why Cobalt Strike?

Cobalt Strike gives you a post-exploitation agent and covert channels to emulate a quiet long-term embedded actor in your customer's network. Malleable C2 lets you change your network indicators to look like different malware each time. These tools complement Cobalt Strike's solid social engineering process, its robust collaboration capability, and unique reports designed to aid blue team training.

Where do I learn how to use Cobalt Strike?

Watch the Advanced Threat Tactics course www.cobaltstrike.com/training
Review the documentation www.cobaltstrike.com/support

How much does Cobalt Strike cost?

New Cobalt Strike licenses cost $3,500 per user for a one year license. License renewals cost $2,500 per user, per year. Request a quote or buy Cobalt Strike online.

Is a trial version of Cobalt Strike available?

Yes, a 21-day trial is available. www.cobaltstrike.com/trial

Who develops Cobalt Strike?

Raphael Mudge is the creator of Cobalt Strike.

Armitage vs Cobalt Strike

Armitage

Armitage is a scriptable red team collaboration tool built on top of the Metasploit Framework. Through Armitage, you may launch scans and exploits, get exploit recommendations, and use the advanced features of the Metasploit Framework's meterpreter. Armitage was originally made for Cyber Defense Exercises, but a lot of penetration testers use Armitage for its collaboration capabilities and its time-saving GUI.

Features:

♦ Cortana Scripting
♦ Dynamic Workspaces
♦ Graphical User Interface
♦ "Hail Mary" Attack
♦ Red Team Collaboration


Cobalt Strike

Cobalt Strike is a collection of threat emulation tools that work with the Metasploit Framework. Cobalt Strike helps you get a foothold in a network and quietly keep it. Cobalt Strike's post-exploitation tools help you demonstrate what a sophisticated attacker can do. Cobalt Strike also generates professional reports at the end of your engagements.
As a bonus, Cobalt Strike includes Armitage's GUI and features. If you know Armitage, you'll find Cobalt Strike very easy to learn.

Features

♦ Anti-virus Evasion
♦ Auto-exploit Server
♦ Beacon Payload (Covert C2)
♦ Cobalt Strike Arsenal (Anti-virus Evasion)
♦ PsExec with Token Workflow
♦ Reporting
♦ Smart Applet Attack
♦ Social Engineering Packages
♦ Spear Phishing
♦ System Profiler
♦ VNC Integration
♦ VPN Pivoting
♦ Website Clone Tool

cd /opt/cobaltstrike3.0
sudo ./teamserver 127.0.0.1 msf  (replace 127.0.0.1 with your teamserver IP else use 127.0.0.1 for local)
sudo ./cobaltstrike