Канал: Raphael Mudge

Using Direct Syscalls in Cobalt Strike's Artifact Kit

Using Direct Syscalls in Cobalt Strike's Artifact Kit

Universal Unhooking as a Beacon Object File

Universal Unhooking as a Beacon Object File

Session Passing from Core Impact to Cobalt Strike

Session Passing from Core Impact to Cobalt Strike

Session Passing from Cobalt Strike to Core Impact [HQ]

Session Passing from Cobalt Strike to Core Impact [HQ]

Cobalt Strike and Core Impact Interoperability [HQ]

Cobalt Strike and Core Impact Interoperability [HQ]

Core Impact 20.3 Demonstration and Tutorial for Cobalt Strike users [HQ]

Core Impact 20.3 Demonstration and Tutorial for Cobalt Strike users [HQ]

CVE-2020-1472 Zerologon as a Beacon Object File

CVE-2020-1472 Zerologon as a Beacon Object File

CVE-2020-0796 (SMBGhost) as a Beacon Object File

CVE-2020-0796 (SMBGhost) as a Beacon Object File

Situational Awareness Beacon Object Files by TrustedSec

Situational Awareness Beacon Object Files by TrustedSec

Beacon Object Files - Luser Demo

Beacon Object Files - Luser Demo

Session Prepping and Session Passing (Cobalt Strike 4.0)

Session Prepping and Session Passing (Cobalt Strike 4.0)

Artifact Kit (Cobalt Strike 4.0)

Artifact Kit (Cobalt Strike 4.0)

Credential Management (Cobalt Strike 4.0)

Credential Management (Cobalt Strike 4.0)

Browser Pivoting (Cobalt Strike 4.0)

Browser Pivoting (Cobalt Strike 4.0)

DNS Beacon (Cobalt Strike 4.0)

DNS Beacon (Cobalt Strike 4.0)

Elevate Kit (Cobalt Strike 4.0)

Elevate Kit (Cobalt Strike 4.0)

External C2 (Cobalt Strike 4.0)

External C2 (Cobalt Strike 4.0)

File Browser (Cobalt Strike 4.0)

File Browser (Cobalt Strike 4.0)

Golden Ticket (Cobalt Strike 4.0)

Golden Ticket (Cobalt Strike 4.0)

HTTP Beacon (Cobalt Strike 4.0)

HTTP Beacon (Cobalt Strike 4.0)

Malleable C2 (Cobalt Strike 4.0)

Malleable C2 (Cobalt Strike 4.0)

Lateral Movement (Cobalt Strike 4.0)

Lateral Movement (Cobalt Strike 4.0)

Session-contained PowerShell One-liner (Cobalt Strike 4.0)

Session-contained PowerShell One-liner (Cobalt Strike 4.0)

Bring Your Own Weaponization - Lateral Movement

Bring Your Own Weaponization - Lateral Movement

Resource Kit (Cobalt Strike 4.0)

Resource Kit (Cobalt Strike 4.0)

Reverse TCP Pivot Listener (Cobalt Strike 4.0)

Reverse TCP Pivot Listener (Cobalt Strike 4.0)

SMB Beacon (Cobalt Strike 4.0)

SMB Beacon (Cobalt Strike 4.0)

Spear Phishing (Cobalt Strike 4.0)

Spear Phishing (Cobalt Strike 4.0)

Spawn As (Cobalt Strike 4.0)

Spawn As (Cobalt Strike 4.0)

SSH Sessions (Cobalt Strike 4.0)

SSH Sessions (Cobalt Strike 4.0)

TCP Beacon (Cobalt Strike 4.0)

TCP Beacon (Cobalt Strike 4.0)

Red Team Ops with Cobalt Strike (9 of 9): Pivoting

Red Team Ops with Cobalt Strike (9 of 9): Pivoting

Red Team Ops with Cobalt Strike (8 of 9): Lateral Movement

Red Team Ops with Cobalt Strike (8 of 9): Lateral Movement

Red Team Ops with Cobalt Strike (7 of 9): Privilege Escalation

Red Team Ops with Cobalt Strike (7 of 9): Privilege Escalation

Red Team Ops with Cobalt Strike (6 of 9): Post Exploitation

Red Team Ops with Cobalt Strike (6 of 9): Post Exploitation

Red Team Ops with Cobalt Strike (5 of 9): Initial Access

Red Team Ops with Cobalt Strike (5 of 9): Initial Access

Red Team Ops with Cobalt Strike (4 of 9): Weaponization

Red Team Ops with Cobalt Strike (4 of 9): Weaponization

Red Team Ops with Cobalt Strike (3 of 9): C2

Red Team Ops with Cobalt Strike (3 of 9): C2

Red Team Ops with Cobalt Strike (2 of 9): Infrastructure

Red Team Ops with Cobalt Strike (2 of 9): Infrastructure

Red Team Ops with Cobalt Strike (1 of 9): Operations

Red Team Ops with Cobalt Strike (1 of 9): Operations

Business Operations at Strategic Cyber LLC

Business Operations at Strategic Cyber LLC

Block third-party DLLs in child processes

Block third-party DLLs in child processes

Process Argument Spoofing

Process Argument Spoofing

Reverse TCP Pivot Listener in Cobalt Strike

Reverse TCP Pivot Listener in Cobalt Strike

TCP Beacon

TCP Beacon

PowerShell Flexibility

PowerShell Flexibility

Obfuscate and Sleep

Obfuscate and Sleep

Fighting the Toolset

Fighting the Toolset

Internal Monologue Attack

Internal Monologue Attack

Bypass UAC with Token Duplication

Bypass UAC with Token Duplication

In-memory Evasion (5 of 4) - Cobalt Strike 3.11 Addendum

In-memory Evasion (5 of 4) - Cobalt Strike 3.11 Addendum

In-memory Evasion (1 of 4) - Detections

In-memory Evasion (1 of 4) - Detections

In-memory Evasion (2 of 4) - A Payload's Life

In-memory Evasion (2 of 4) - A Payload's Life

In-memory Evasion (3 of 4) - Evasion

In-memory Evasion (3 of 4) - Evasion

In-memory Evasion (4 of 4) - Threat Emulation

In-memory Evasion (4 of 4) - Threat Emulation

Malleable HTTP Staging

Malleable HTTP Staging

Cobalt Strike and Wayland Desktops (Not Supported)

Cobalt Strike and Wayland Desktops (Not Supported)

The Resource Kit

The Resource Kit

Parent Process Spoofing and Session Prepping with Cobalt Strike

Parent Process Spoofing and Session Prepping with Cobalt Strike

Malleable Memory Indicators with Cobalt Strike's Beacon Payload

Malleable Memory Indicators with Cobalt Strike's Beacon Payload

Code Signing Cobalt Strike's Executables and DLLs

Code Signing Cobalt Strike's Executables and DLLs

Domain Fronting and High-trust Redirectors, pt. 2, SSL

Domain Fronting and High-trust Redirectors, pt. 2, SSL

Domain Fronting and High-trust Redirectors with Cobalt Strike

Domain Fronting and High-trust Redirectors with Cobalt Strike

Lateral Movement with the MMC20.Application COM Object in Cobalt Strike

Lateral Movement with the MMC20.Application COM Object in Cobalt Strike

BloodHound - Analyzing Active Directory Trust Relationships

BloodHound - Analyzing Active Directory Trust Relationships

BloodHound - Setup on Kali 2016 Rolling

BloodHound - Setup on Kali 2016 Rolling

The Amazing and Wonderful Elevate Kit

The Amazing and Wonderful Elevate Kit

HTTP GET-only Beacon C2

HTTP GET-only Beacon C2

Agentless Post-Exploitation

Agentless Post-Exploitation

UNIX Post Exploitation with Cobalt Strike SSH Sessions

UNIX Post Exploitation with Cobalt Strike SSH Sessions

Session Passing without Payload Stagers

Session Passing without Payload Stagers

Session Passing: Cobalt Strike to PowerShell Empire

Session Passing: Cobalt Strike to PowerShell Empire

Scripted Web Delivery

Scripted Web Delivery

Unmanaged PowerShell - PowerShell without powershell.exe

Unmanaged PowerShell - PowerShell without powershell.exe

Issue SSH commands from PowerShell

Issue SSH commands from PowerShell

Tunnel Beacon over SSH

Tunnel Beacon over SSH

HOWTO Tunnel Meterpreter through Cobalt Strike's Beacon

HOWTO Tunnel Meterpreter through Cobalt Strike's Beacon

Spawn Cobalt Strike's Beacon from Meterpreter

Spawn Cobalt Strike's Beacon from Meterpreter

Spawn Meterpreter from Cobalt Strike's Beacon

Spawn Meterpreter from Cobalt Strike's Beacon

Aggressor Script

Aggressor Script

mimikatz dcsync in Cobalt Strike's Beacon

mimikatz dcsync in Cobalt Strike's Beacon

Flying a Cylon Raider

Flying a Cylon Raider

The $50 Device that Detects Mimikatz Use

The $50 Device that Detects Mimikatz Use

Lateral Movement Demonstration

Lateral Movement Demonstration

Malleable Command and Control Demo

Malleable Command and Control Demo

Session Passing

Session Passing

Credential Harvesting

Credential Harvesting

Manage Downloaded Files in Cobalt Strike

Manage Downloaded Files in Cobalt Strike

Pivot Listeners

Pivot Listeners

MS Word and Excel Macro Attack

MS Word and Excel Macro Attack

SOCKS Pivoting with Proxychains

SOCKS Pivoting with Proxychains

Basic Beacon Use

Basic Beacon Use

User Exploitation at Scale

User Exploitation at Scale

Port Scanning from Beacon

Port Scanning from Beacon

Sending Metasploit through a SOCKS Proxy Pivot

Sending Metasploit through a SOCKS Proxy Pivot

HTML Application Attack on Windows 10

HTML Application Attack on Windows 10

Browser Pivoting

Browser Pivoting

Bypass UAC

Bypass UAC

Golden Ticket Tutorial

Golden Ticket Tutorial

DNS Beacon Setup and Use

DNS Beacon Setup and Use

SMB Beacon Setup and Use

SMB Beacon Setup and Use

Generate a Beacon Executable with the Veil Evasion Framework

Generate a Beacon Executable with the Veil Evasion Framework

HTTP Beacon with Redirectors

HTTP Beacon with Redirectors

How to create an HTTP Beacon Listener

How to create an HTTP Beacon Listener

Lateral Movement with Cobalt Strike

Lateral Movement with Cobalt Strike

Elevate with Credentials

Elevate with Credentials

Client-side Reconaissance

Client-side Reconaissance

The Artifact Kit

The Artifact Kit

How to start a Cobalt Strike team server and connect to it

How to start a Cobalt Strike team server and connect to it

Delivering Beacon with a Metasploit Framework Exploit

Delivering Beacon with a Metasploit Framework Exploit

Advanced Threat Tactics (2 of 9): Infrastructure

Advanced Threat Tactics (2 of 9): Infrastructure

Advanced Threat Tactics (3 of 9): Targeted Attacks

Advanced Threat Tactics (3 of 9): Targeted Attacks

Advanced Threat Tactics (8 of 9): Malleable Command and Control

Advanced Threat Tactics (8 of 9): Malleable Command and Control

Advanced Threat Tactics (9 of 9): Evasion

Advanced Threat Tactics (9 of 9): Evasion

Advanced Threat Tactics (1 of 9): Operations

Advanced Threat Tactics (1 of 9): Operations

Advanced Threat Tactics (6 of 9): Lateral Movement

Advanced Threat Tactics (6 of 9): Lateral Movement

Advanced Threat Tactics (7 of 9): Pivoting

Advanced Threat Tactics (7 of 9): Pivoting

Advanced Threat Tactics (5 of 9): Privilege Escalation

Advanced Threat Tactics (5 of 9): Privilege Escalation

Advanced Threat Tactics (4 of 9): Post Exploitation

Advanced Threat Tactics (4 of 9): Post Exploitation

Cobalt Strike 3.0 Preview

Cobalt Strike 3.0 Preview

Penetration Testing Lab - Walkthrough

Penetration Testing Lab - Walkthrough

Cobalt Strike 2.5 - Lateral Movement with Beacon

Cobalt Strike 2.5 - Lateral Movement with Beacon

Reverse Port Forward with Cobalt Strike's Beacon

Reverse Port Forward with Cobalt Strike's Beacon

WinRM is my Remote Access Tool

WinRM is my Remote Access Tool

Pass-the-Hash with Mimikatz

Pass-the-Hash with Mimikatz

Cobalt Strike 2.4 - hashdump, mimikatz, post-ex jobs, and foreign listeners

Cobalt Strike 2.4 - hashdump, mimikatz, post-ex jobs, and foreign listeners

An hour of hacking at a student cyber defense exercise

An hour of hacking at a student cyber defense exercise

PowerShell Web Delivery (Cobalt Strike)

PowerShell Web Delivery (Cobalt Strike)

Cobalt Strike 2.3 - runas and PowerShell Web Delivery

Cobalt Strike 2.3 - runas and PowerShell Web Delivery

VPN Pivoting over ICMP

VPN Pivoting over ICMP

Layer-2 Pivoting Demonstration

Layer-2 Pivoting Demonstration

VPN Pivoting with Cobalt Strike

VPN Pivoting with Cobalt Strike

PowerShell Post-Exploitation with Cobalt Strike's Beacon

PowerShell Post-Exploitation with Cobalt Strike's Beacon

HTML Application Social Engineering Attack

HTML Application Social Engineering Attack

Setup Cobalt Strike Team Server in Amazon's EC2

Setup Cobalt Strike Team Server in Amazon's EC2

Energetic Bear / Crouching Yeti / Dragonfly - Threat Replication Case Study

Energetic Bear / Crouching Yeti / Dragonfly - Threat Replication Case Study

Putter Panda - Threat Replication Case Study

Putter Panda - Threat Replication Case Study

String of Paerls - Threat Replication Case Study

String of Paerls - Threat Replication Case Study

Pass-the-[Golden]-Ticket with Cobalt Strike's Beacon

Pass-the-[Golden]-Ticket with Cobalt Strike's Beacon

Use Cobalt Strike Payloads with Veil Evasion

Use Cobalt Strike Payloads with Veil Evasion

Malleable Command and Control

Malleable Command and Control

Armitage and Metasploit Training (2011) - 4. Post Exploitation

Armitage and Metasploit Training (2011) - 4. Post Exploitation

Armitage and Metasploit Training (2011) - 6. Team Tactics

Armitage and Metasploit Training (2011) - 6. Team Tactics

Armitage and Metasploit Training (2011) - 3. Access

Armitage and Metasploit Training (2011) - 3. Access

Armitage and Metasploit Training (2011) - 5. Maneuver

Armitage and Metasploit Training (2011) - 5. Maneuver

Armitage and Metasploit Training (2011) - 2. Metasploit Overview

Armitage and Metasploit Training (2011) - 2. Metasploit Overview

Armitage and Metasploit Training (2011) - 1. Introduction

Armitage and Metasploit Training (2011) - 1. Introduction

Mimikatz 2.0 Kerberos Golden Ticket Tutorial

Mimikatz 2.0 Kerberos Golden Ticket Tutorial

Getting the Beacon Payload Past HTTP Proxy Authentication

Getting the Beacon Payload Past HTTP Proxy Authentication

Covert Lateral Movement and Named Pipe Communication with Cobalt Strike's Beacon

Covert Lateral Movement and Named Pipe Communication with Cobalt Strike's Beacon

Bypass UAC on Windows 8.1

Bypass UAC on Windows 8.1

Privilege Escalation to Domain Admin and Lateral Movement with Cobalt Strike's Beacon

Privilege Escalation to Domain Admin and Lateral Movement with Cobalt Strike's Beacon

Deliver DNS Trojan with Microsoft Office Macro

Deliver DNS Trojan with Microsoft Office Macro

Microsoft Office Macro Attack - Trojanize Word and Excel Documents

Microsoft Office Macro Attack - Trojanize Word and Excel Documents

Generate EXEs and DLLs for Penetration Testing

Generate EXEs and DLLs for Penetration Testing

Windows Dropper Trojan Attack HOWTO

Windows Dropper Trojan Attack HOWTO

Firefox Add-on Hack on Windows 8.1

Firefox Add-on Hack on Windows 8.1

Advanced Penetration Testing through Cloud-based Redirectors

Advanced Penetration Testing through Cloud-based Redirectors

Man-in-the-Browser Session Hijacking

Man-in-the-Browser Session Hijacking

Peer-to-peer Communication with Cobalt Strike's Beacon

Peer-to-peer Communication with Cobalt Strike's Beacon

Tradecraft (7 of 9) - Lateral Movement

Tradecraft (7 of 9) - Lateral Movement

Tradecraft (9 of 9) - Operations

Tradecraft (9 of 9) - Operations

Tradecraft (8 of 9) - Offense in Depth

Tradecraft (8 of 9) - Offense in Depth

Tradecraft (6 of 9) - Post Exploitation with Meterpreter

Tradecraft (6 of 9) - Post Exploitation with Meterpreter

Tradecraft (5 of 9) - Post Exploitation with Beacon

Tradecraft (5 of 9) - Post Exploitation with Beacon

Tradecraft (4 of 9) - Social Engineering

Tradecraft (4 of 9) - Social Engineering

Tradecraft (3 of 9) - Getting a Foothold

Tradecraft (3 of 9) - Getting a Foothold

Tradecraft (2 of 9) - Basic Exploitation (aka Hacking circa 2003)

Tradecraft (2 of 9) - Basic Exploitation (aka Hacking circa 2003)

Tradecraft (1 of 9) - Introduction

Tradecraft (1 of 9) - Introduction

Browser Pivoting

Browser Pivoting

Cobalt Strike 1.47 - What's New?

Cobalt Strike 1.47 - What's New?

DNS and HTTP Pivoting with Cobalt Strike's Beacon

DNS and HTTP Pivoting with Cobalt Strike's Beacon

Covert Command and Control over DNS with Beacon

Covert Command and Control over DNS with Beacon

National CCDC Red Team - Some Fun

National CCDC Red Team - Some Fun

WRCCDC - Red Team Fun (I got your router password)

WRCCDC - Red Team Fun (I got your router password)

WRCCDC - Red Team Fun (Dropping VMs)

WRCCDC - Red Team Fun (Dropping VMs)

WRCCDC - Red Team Fun (Injecting host entries)

WRCCDC - Red Team Fun (Injecting host entries)

Penetration Testing Labs - Walkthrough

Penetration Testing Labs - Walkthrough

Distributed Red Team Operations with Cobalt Strike

Distributed Red Team Operations with Cobalt Strike

Cobalt Strike VNC Fun

Cobalt Strike VNC Fun

Automatic Web Drive-by Exploit Server - Cobalt Strike

Automatic Web Drive-by Exploit Server - Cobalt Strike

Smart Java Applet Exploitation - Cobalt Strike

Smart Java Applet Exploitation - Cobalt Strike

Java Signed Applet Attack - Cobalt Strike

Java Signed Applet Attack - Cobalt Strike

Beacon - Covert Command and Control for Cobalt Strike

Beacon - Covert Command and Control for Cobalt Strike

Covert VPN - Cobalt Strike

Covert VPN - Cobalt Strike

Cortana: Rise of the Automated Red Team (DEFCON 20)

Cortana: Rise of the Automated Red Team (DEFCON 20)

Scripting with Cortana - Cobalt Strike

Scripting with Cortana - Cobalt Strike

USB AutoPlay Attack - Cobalt Strike

USB AutoPlay Attack - Cobalt Strike

1. Introduction - Penetration Testing with Cobalt Strike

1. Introduction - Penetration Testing with Cobalt Strike

2. Remote Attack - Penetration Testing with Cobalt Strike

2. Remote Attack - Penetration Testing with Cobalt Strike

7. Team Ops - Penetration Testing with Cobalt Strike

7. Team Ops - Penetration Testing with Cobalt Strike

3. Client-side Attack - Penetration Testing with Cobalt Strike

3. Client-side Attack - Penetration Testing with Cobalt Strike

Listener Management - Cobalt Strike

Listener Management - Cobalt Strike

MS Word and Excel Macro Attack - Cobalt Strike

MS Word and Excel Macro Attack - Cobalt Strike

6. Maneuver - Penetration Testing with Cobalt Strike

6. Maneuver - Penetration Testing with Cobalt Strike

System Profiler - Cobalt Strike

System Profiler - Cobalt Strike

Generate a Trojan EXE - Cobalt Strike

Generate a Trojan EXE - Cobalt Strike

Adobe PDF Embedded EXE Attack - Cobalt Strike

Adobe PDF Embedded EXE Attack - Cobalt Strike

MacOS X Trojan - Cobalt Strike

MacOS X Trojan - Cobalt Strike

Firefox Addon Attack - Cobalt Strike

Firefox Addon Attack - Cobalt Strike