daemon-sec-cheatsheet

The cheatsheet vault for operators: AD, enumeration, exploitation, priv-esc, web, DFIR
git clone https://git.daemon-sec.xyz/daemon-sec-cheatsheet.git
Log | Files | Refs | README | LICENSE

cobalt-strike-cheatsheet.md (2673B)

      1 ---
      2 title: "Cobalt Strike"
      3 topic: "Methodology and Resources"
      4 topicSlug: "methodology-and-resources"
      5 sourcePath: "Methodology and Resources/Cobalt Strike - Cheatsheet.md"
      6 sourceUrl: "https://github.com/swisskyrepo/PayloadsAllTheThings/blob/3ac27901c711/Methodology%20and%20Resources/Cobalt%20Strike%20-%20Cheatsheet.md"
      7 sha: "3ac27901c711"
      8 isReadme: false
      9 ---
     10 
     11 # Cobalt Strike
     12 
     13 :warning: Content of this page has been moved to [InternalAllTheThings/command-control/cobalt-strike](/internal/command-control/cobalt-strike)
     14 
     15 - [Infrastructure](/internal/command-control/cobalt-strike#infrastructure)
     16     - [Redirectors](/internal/command-control/cobalt-strike#redirectors)
     17     - [Domain fronting](/internal/command-control/cobalt-strike#domain-fronting)
     18 - [OpSec](/internal/command-control/cobalt-strike#opsec)
     19     - [Customer ID](/internal/command-control/cobalt-strike#customer-id)
     20 - [Payloads](/internal/command-control/cobalt-strike#payloads)
     21     - [DNS Beacon](/internal/command-control/cobalt-strike#dns-beacon)
     22     - [SMB Beacon](/internal/command-control/cobalt-strike#smb-beacon)
     23     - [Metasploit compatibility](/internal/command-control/cobalt-strike#metasploit-compatibility)
     24     - [Custom Payloads](/internal/command-control/cobalt-strike#custom-payloads)
     25 - [Malleable C2](/internal/command-control/cobalt-strike#malleable-c2)
     26 - [Files](/internal/command-control/cobalt-strike#files)
     27 - [Powershell and .NET](/internal/command-control/cobalt-strike#powershell-and-net)
     28     - [Powershell commabds](/internal/command-control/cobalt-strike#powershell-commands)
     29     - [.NET remote execution](/internal/command-control/cobalt-strike#net-remote-execution)
     30 - [Lateral Movement](/internal/command-control/cobalt-strike#lateral-movement)
     31 - [VPN & Pivots](/internal/command-control/cobalt-strike#vpn--pivots)
     32 - [Kits](/internal/command-control/cobalt-strike#kits)
     33     - [Elevate Kit](/internal/command-control/cobalt-strike#elevate-kit)
     34     - [Persistence Kit](/internal/command-control/cobalt-strike#persistence-kit)
     35     - [Resource Kit](/internal/command-control/cobalt-strike#resource-kit)
     36     - [Artifact Kit](/internal/command-control/cobalt-strike#artifact-kit)
     37     - [Mimikatz Kit](/internal/command-control/cobalt-strike#mimikatz-kit)
     38     - [Sleep Mask Kit](/internal/command-control/cobalt-strike#sleep-mask-kit)
     39     - [Thread Stack Spoofer](/internal/command-control/cobalt-strike#thread-stack-spoofer)
     40 - [Beacon Object Files](/internal/command-control/cobalt-strike#beacon-object-files)
     41 - [NTLM Relaying via Cobalt Strike](/internal/command-control/cobalt-strike#ntlm-relaying-via-cobalt-strike)
     42 - [References](/internal/command-control/cobalt-strike#references)