Security Memo

Search (Ctrl+K)

SearchSearch

Recent Notes

  • SMART

    Oct 22, 2024

    • software
  • Bossa Nova

    Oct 22, 2024

    • ZFS

      Oct 22, 2024

      • post-rock

        Oct 06, 2024

        • concept
      • 2024-09-27

        Sep 27, 2024

        • daily

      See 1423 more sorted by tag →

      Home

      ❯

      Cobalt Strike beacon

      Cobalt Strike beacon

      created Jan 08, 2024updated Apr 17, 20241 min read

      • concept

      A Cobalt Strike “beacon” is the payload installed on a compromised machine that connects back to CS’s server. The beacon communicates to the team server at a fixed interval (jitter supported) to upload information and download new tasks. For a more comprehensive list of commands, see Cobalt-Strike/Beacon-Commands - aldeid.

      See Cobalt Strike beacon command list.

      Graph View

      Backlinks

      • Cobalt Strike beacon command list
      • Cobalt Strike persistence via startup folder
      • Cobalt Strike persistence via task scheduler
      • overpass-the-hash
      • pass-the-ticket
      • unquoted service path
      • using Mimikatz in Cobalt Strike beacon
      • web proxy may block C2 traffic

      Created with Quartz v4.2.3 © 2024

      • GitHub
      • LinkedIn
      • HackTheBox