[chickencoc]

░█████╗░██╗░░██╗██╗░█████╗░██╗░░██╗███████╗███╗░░██╗░█████╗░░█████╗░░█████╗░
██╔══██╗██║░░██║██║██╔══██╗██║░██╔╝██╔════╝████╗░██║██╔══██╗██╔══██╗██╔══██╗
██║░░╚═╝███████║██║██║░░╚═╝█████═╝░█████╗░░██╔██╗██║██║░░╚═╝██║░░██║██║░░╚═╝
██║░░██╗██╔══██║██║██║░░██╗██╔═██╗░██╔══╝░░██║╚████║██║░░██╗██║░░██║██║░░██╗
╚█████╔╝██║░░██║██║╚█████╔╝██║░╚██╗███████╗██║░╚███║╚█████╔╝╚█████╔╝╚█████╔╝
░╚════╝░╚═╝░░╚═╝╚═╝░╚════╝░╚═╝░░╚═╝╚══════╝╚═╝░░╚══╝░╚════╝░░╚════╝░░╚════╝░

Code:

What is Cobalt Strike? Cobalt Strike is software for Adversary Simulations and Red Team Operations. What are Adversary Simulations and Red Team Operations? Adversary Simulations and Red Team Operations are security assessments that replicate the tactics and techniques of an advanced adversary in a network. While penetration tests focus on unpatched vulnerabilities and misconfigurations, these assessments benefit security operations and incident response. Why Cobalt Strike? Cobalt Strike gives you a post-exploitation agent and covert channels to emulate a quiet long-term embedded actor in your customer's network. Malleable C2 lets you change your network indicators to look like different malware each time. These tools complement Cobalt Strike's solid social engineering process, its robust collaboration capability, and unique reports designed to aid blue team training. Where do I learn how to use Cobalt Strike? Watch the Advanced Threat Tactics course www.cobaltstrike.com/training Review the documentation www.cobaltstrike.com/support How much does Cobalt Strike cost? New Cobalt Strike licenses cost $3,500 per user for a one year license. License renewals cost $2,500 per user, per year. Request a quote or buy Cobalt Strike online. Is a trial version of Cobalt Strike available? Yes, a 21-day trial is available. www.cobaltstrike.com/trial Who develops Cobalt Strike? Raphael Mudge is the creator of Cobalt Strike. Armitage vs Cobalt Strike Armitage Armitage is a scriptable red team collaboration tool built on top of the Metasploit Framework. Through Armitage, you may launch scans and exploits, get exploit recommendations, and use the advanced features of the Metasploit Framework's meterpreter. Armitage was originally made for Cyber Defense Exercises, but a lot of penetration testers use Armitage for its collaboration capabilities and its time-saving GUI. Features: ♦ Cortana Scripting ♦ Dynamic Workspaces ♦ Graphical User Interface ♦ "Hail Mary" Attack ♦ Red Team Collaboration Cobalt Strike Cobalt Strike is a collection of threat emulation tools that work with the Metasploit Framework. Cobalt Strike helps you get a foothold in a network and quietly keep it. Cobalt Strike's post-exploitation tools help you demonstrate what a sophisticated attacker can do. Cobalt Strike also generates professional reports at the end of your engagements. As a bonus, Cobalt Strike includes Armitage's GUI and features. If you know Armitage, you'll find Cobalt Strike very easy to learn. Features ♦ Anti-virus Evasion ♦ Auto-exploit Server ♦ Beacon Payload (Covert C2) ♦ Cobalt Strike Arsenal (Anti-virus Evasion) ♦ PsExec with Token Workflow ♦ Reporting ♦ Smart Applet Attack ♦ Social Engineering Packages ♦ Spear Phishing ♦ System Profiler ♦ VNC Integration ♦ VPN Pivoting ♦ Website Clone Tool Usage: ♦ Download and extract compressed archive to /opt/cobaltstrike3.0 cd /opt/cobaltstrike3.0 sudo ./teamserver 127.0.0.1 msf  (replace 127.0.0.1 with your teamserver IP else use 127.0.0.1 for local) sudo ./cobaltstrike

Download:
↓ cobaltstrike3.0.zip [18MB]

Cobalt strike website:
https://www.cobaltstrike.com/


(No VT so use in safe enviroment)

[mothered]

A pretty good trial period of 57,534 years.

[chickencoc]

A pretty good trial period of 57,534 years.

I got the software and pictures from an unchecked source so I believe its cracked (however I am not able to run this program on my current OS to check if it works)

[fritz]

A pretty good trial period of 57,534 years.

I got the software and pictures from an unchecked source so I believe its cracked (however I am not able to run this program on my current OS to check if it works)

I can confirm it does indeed need Linux on the server side : https://www.cobaltstrike.com/help-system-requirements
It seems to work alright but couldn't test pretty much anything, I might have a deeper look with a server later

P.S. Here is the VT report of the client for Windows if you're curious : https://www.virustotal.com/gui/file/0e32.../detection

[mothered]

I can confirm it does indeed need Linux on the server side : https://www.cobaltstrike.com/help-system-requirements
It seems to work alright but couldn't test pretty much anything, I might have a deeper look with a server later

P.S. Here is the VT report of the client for Windows if you're curious : https://www.virustotal.com/gui/file/0e32.../detection

Thanks for sharing your experience, as well as the tool's functionality and compatibility.

It will allow members to make Informed decisions with Its Installation and usability.

[fritz]

I can confirm it does indeed need Linux on the server side : https://www.cobaltstrike.com/help-system-requirements
It seems to work alright but couldn't test pretty much anything, I might have a deeper look with a server later

P.S. Here is the VT report of the client for Windows if you're curious : https://www.virustotal.com/gui/file/0e32.../detection

Thanks for sharing your experience, as well as the tool's functionality and compatibility.

It will allow members to make Informed decisions with Its Installation and usability.

You're much welcome !
I actually just had another look, trying to make the server-side work.
Unfortunately, probably because of some incompatibilities (the code is from 2015, there are some newer versions though), the server won't start. Basically I've got the same error as this Russian guy : https://forum.antichat.ru/threads/475927/

But some good news, I had a look and the java code doesn't look too obfuscated nor infected... on the server side ! Code is pretty clear.
One of the first thing the client does though (and this is the part a bit more obfuscated) is some privilege escalation exploits (many different, depending on java version). Basically they're pretty much all inspired by this one : https://github.com/rapid7/metasploit-fra...ploit.java
This could totally be related to the features though, knowing the nature of the tool.

[mothered]

I actually just had another look, trying to make the server-side work.
Unfortunately, probably because of some incompatibilities (the code is from 2015, there are some newer versions though), the server won't start. Basically I've got the same error as this Russian guy : https://forum.antichat.ru/threads/475927/

But some good news, I had a look and the java code doesn't look too obfuscated nor infected... on the server side ! Code is pretty clear.
One of the first thing the client does though (and this is the part a bit more obfuscated) is some privilege escalation exploits (many different, depending on java version). Basically they're pretty much all inspired by this one : https://github.com/rapid7/metasploit-fra...ploit.java
This could totally be related to the features though, knowing the nature of the tool.

Excellent feedback Indeed.

Time permitted, I'll checkout the tool and see how It behaves on my end.

[ConcernedCitizen]

A pretty good trial period of 57,534 years.

I got the software and pictures from an unchecked source so I believe its cracked (however I am not able to run this program on my current OS to check if it works)

I can confirm it does indeed need Linux on the server side : https://www.cobaltstrike.com/help-system-requirements
It seems to work alright but couldn't test pretty much anything, I might have a deeper look with a server later

P.S. Here is the VT report of the client for Windows if you're curious : https://www.virustotal.com/gui/file/0e32.../detection

Not sure why not, I'll spin up a few Docker containers and check it out.

[fritz]

I got the software and pictures from an unchecked source so I believe its cracked (however I am not able to run this program on my current OS to check if it works)

I can confirm it does indeed need Linux on the server side : https://www.cobaltstrike.com/help-system-requirements
It seems to work alright but couldn't test pretty much anything, I might have a deeper look with a server later

P.S. Here is the VT report of the client for Windows if you're curious : https://www.virustotal.com/gui/file/0e32.../detection

Not sure why not, I'll spin up a few Docker containers and check it out.

Let us know if you succeed to make it work, I personally gave up, would be easier with a newer version

[mumbles]

Any of you manage to spin this up? Wouldnt mind takin the CS for a run...