Skip to content

Cobalt Strike

merces edited this page May 30, 2023 · 1 revision

Dump the configuration of a Cobalt Strike beacon. To run it in retoolkit, open retoolkit -> Programming -> Python Command Prompt and type:

python 1768.py -h

Scan files or process memory for Cobalt Strike beacons and parse their configuration. To run it, open a Command Prompt and type:

CobaltStrikeScan -h
Clone this wiki locally