

Right-click on a Beacon or inside of a Beacon's console to access the Beacon menu. Type helpįollowed by a command name to get detailed help. Type help in the Beacon console to see available commands. It’s worth your time toīecome familiar with its commands. You will likely spend most of your time with Cobalt Strike in the Beacon console. If a teammate issues a command, Cobalt Strike will pre-fix the command with their handle. Username and PID of the current session, and the Beacon’s last check-in time.Įach command that's issued to a Beacon, whether through the GUI or the console, will show up in this In its default configuration, the statusbar shows the target's NetBIOS name, the This status bar contains informationĪbout the current session. In between the Beacon console's input and output is a status bar. The Beacon console is also where command output and other The Beacon console allows you to see which tasks were issued to aīeacon and to see when it downloads them.


Right-click on a Beacon session and select interact to open that Beacon's console. This allows you to cloak Beacon activity to look like other malware or blend-in as legitimate traffic. Redefine Beacon's communication with Cobalt Strike's Interactive communication happens in real-time.īeacon's network indicators are malleable.
COBALT STRIKE BEACON PTH DOWNLOAD
Will phone home, download its tasks, and go to sleep. Asynchronous communication is low and slow. You mayĪlso limit which hosts egress a network by controlling peer-to-peer Beacons over Windows named pipes.īeacon is flexible and supports asynchronous and interactive communication. Use Beacon to egress a network over HTTP, HTTPS, or DNS. Beacon is Cobalt Strike's payload to model advanced attackers.
