Cobalt Strike Archive

In-memory Evasion (1 of 4) - Detections

In-memory Evasion (2 of 4) - A Payload's Life

In-memory Evasion (3 of 4) - Evasion

In-memory Evasion (4 of 4) - Threat Emulation

In-memory Evasion (5 of 4) - Cobalt Strike 3.11 Addendum

Using Direct Syscalls in Cobalt Strike's Artifact Kit

Lateral Movement (Cobalt Strike 4.0)

Spawn As (Cobalt Strike 4.0)

Unmanaged PowerShell - PowerShell without powershell.exe

Getting the Beacon Payload Past HTTP Proxy Authentication

Metasploit cross-platform Java Exploit (CVE-2011-3544) Demonstration

Resource Kit (Cobalt Strike 4.0)

Session-contained PowerShell One-liner (Cobalt Strike 4.0)

Session Passing from Core Impact to Cobalt Strike

Browser Pivoting (Cobalt Strike 4.0)

Red Team Ops with Cobalt Strike (9 of 9): Pivoting

CVE-2020-1472 Zerologon as a Beacon Object File

Golden Ticket (Cobalt Strike 4.0)

Tradecraft (6 of 9) - Post Exploitation with Meterpreter

TCP Beacon

Reverse TCP Pivot Listener (Cobalt Strike 4.0)

Situational Awareness Beacon Object Files by TrustedSec

The $50 Device that Detects Mimikatz Use

Issue SSH commands from PowerShell

Bypass UAC on Windows 8.1

Code Signing Cobalt Strike's Executables and DLLs

BloodHound - Setup on Kali 2016 Rolling

Red Team Ops with Cobalt Strike (3 of 9): C2

SSH Sessions (Cobalt Strike 4.0)

UNIX Post Exploitation with Cobalt Strike SSH Sessions

Tunnel Beacon over SSH

Credential Management (Cobalt Strike 4.0)

Elevate Kit (Cobalt Strike 4.0)

Domain Fronting and High-trust Redirectors with Cobalt Strike

Beacon Object Files - Luser Demo

Spear Phishing (Cobalt Strike 4.0)

Session Passing: Cobalt Strike to PowerShell Empire

SMB Beacon (Cobalt Strike 4.0)

Session Passing from Cobalt Strike to Core Impact [HQ]

Process Argument Spoofing

Cobalt Strike and Core Impact Interoperability [HQ]