Cobalt Strike is optimized to capture trust relationships and enable lateral movement with captured credentials, password hashes, access tokens, and Kerberos tickets.ĭemonstrate meaningful business risk with Cobalt Strike’s user-exploitation tools. Pivot into the compromised network, discover hosts, and move laterally with Beacon’s helpful automation and peer-to-peer communication over named pipes and TCP sockets. Reprogram Beacon to use network indicators that look like known malware or blend in with existing traffic. Beacon walks through common proxy configurations and calls home to multiple hosts to resist blocking.Įxercise your target’s attack attribution and analysis capability with Beacon’s Malleable Command and Control language. Beacon will phone home over DNS, HTTP, or HTTPS. This post-exploitation payload uses an asynchronous “ low and slow” communication pattern that’s common with advanced threat malware. Cobalt Strike’s phishing tool repurposes saved emails into pixel- perfect phishes.Ĭontrol your target’s network with Cobalt Strike’s Beacon. Use Cobalt Strike’s spear phishing tool to deliver your weaponized document to one or more people in your target’s network. Cobalt Strike also has options to export its post-exploitation payload, Beacon, in a variety of formats for pairing with artifacts outside of this toolset. Cobalt Strike has options to turn common documents into weaponized artifacts. Weaponization is pairing a post-exploitation payload with a document or exploit that will execute it on target. The insights gleaned from reconnaissance will help you understand which options have the best chance of success on your target. Cobalt Strike’s system profiler is a web application that maps your target’s client-side attack surface. OverviewĪ thought-out targeted attack begins with reconnaissance. The rest of this manual discusses these features in detail. This section describes the attack process supported by Cobalt Strike’s feature set. The product is designed to execute targeted attacks and emulate the post-exploitation actions of advanced threat actors. Cobalt Strike is a platform for adversary simulations and red team operations.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |