Joe Vest – Page 2 – WindowsTechs.com

Introducing Cobalt Strike Community Kit

Posted on August 6, 2021 by Joe Vest

What is Community Kit? Cobalt Strike is a post-exploitation framework designed to be extended and customized by the user community. Several excellent tools and scripts have been written and published, but they can be challenging to locate. Community Kit is a central repository of extensions written by the user community to extend the capabilities of […]

Continue reading Introducing Cobalt Strike Community Kit→

Cobalt Strike DoS Vulnerability (CVE-2021-36798)

Posted on August 4, 2021 by Joe Vest

SentinelOne discovered a denial of service (DoS) vulnerability in Cobalt Strike. The bug (aka Hotcobalt) can cause a denial of service on a teamserver by using a fake beacon sending abnormally large screenshots. This bug has been fixed in Cobalt Strike 4.4 Consider mitigating this risk to a teamserver by hardening your C2 infrastructure. Update […]

Continue reading Cobalt Strike DoS Vulnerability (CVE-2021-36798)→

Cobalt Strike DoS Vulnerability (CVE-2021-36798)

Posted on August 4, 2021 by Joe Vest

Continue reading Cobalt Strike DoS Vulnerability (CVE-2021-36798)→

Introducing Mimikatz Kit

Posted on July 29, 2021 by Joe Vest

You can now update Mimikatz between Cobalt Strike releases. Updates will periodically be made available to licensed users via the Arsenal as the Mimikatz Kit. Usage: Download and extract the .tgz from the Arsenal (Note: The version uses the Mimikatz release version naming (i.e., 2.2.0.20210724) Load the mimikatz.cna aggressor script Use mimikatz functions as normal […]

The post Introducing Mimikatz Kit appeared first on Cobalt Strike Research and Development.

Continue reading Introducing Mimikatz Kit→

Introducing Mimikatz Kit

Posted on July 29, 2021 by Joe Vest

The post Introducing Mimikatz Kit appeared first on Cobalt Strike Research and Development.

Continue reading Introducing Mimikatz Kit→

CredBandit (In memory BOF MiniDump) – Tool review – Part 1

Posted on July 13, 2021 by Joe Vest

One of the things I find fascinating about being on the Cobalt Strike team is the community. It is amazing to see how people overcome unique challenges and push the tool in directions never considered. I want explore this with CredBandit (https://github.com/xforcered/CredBandit). This tool has had updates since I started exploring. I’m specifically, looking at […]

Continue reading CredBandit (In memory BOF MiniDump) – Tool review – Part 1→

New home for Cobalt Strike malleable c2 profiles and scripts

Posted on July 7, 2021 by Joe Vest

The Cobalt Strike references (malleable c2 profiles, scripts, Elevate Kit, etc.) have been consolidated under a new GitHub account. https://github.com/cobalt-strike We understand that many blog posts (and even our documentation) have references to the original links. The original links will be available for the time being but may not be in the future. Update your […]

Continue reading New home for Cobalt Strike malleable c2 profiles and scripts→

Create listeners with an aggressor script – listener_create_ext

Posted on July 2, 2021 by Joe Vest

This short post is a follow up to the post “Manage Cobalt Strike with Services” where I described a method to automate Cobalt Strike teamservers by creating services. In this post, I will take a closer look at the aggressor function that is used to create listeners listener_create_ext to expanded on the documentation and provide an […]

Continue reading Create listeners with an aggressor script – listener_create_ext→

Manage Cobalt Strike with Services

Posted on June 23, 2021 by Joe Vest

This post is part of a “Quality of Life” series, where tips and tricks will be shared to make using Cobalt Stike easier. Cobalt Strike is a post-exploitation framework and requires customization to meet your specific needs. This flexibility is one of the most powerful features of Cobalt Strike. While this is great, some may […]

Continue reading Manage Cobalt Strike with Services→

There’s a New Deputy in Town

Posted on April 23, 2021 by Joe Vest

It’s been less than a month since I joined the Cobalt Strike team. My first impressions of this team have been overwhelmingly positive. As Raphael transitioned out, He left us with a message “Cobalt Strike is in good hands.” I couldn’t agree more. What can you expect from me? I’m here to provide input and […]

Continue reading There’s a New Deputy in Town→