Skip to content
@Cobalt-Strike

Cobalt Strike

The official public repository for Cobalt Strike related projects.

Open Source at Fortra

Fortra's Cobalt Strike public projects

This repository offers tools and examples designed to help you get more out of Cobalt Strike. Our goal is to support researchers in pushing the limits of what the product can do—building creative, high-impact tools and techniques.

We're continually inspired by the community, which proves every day that great ideas come from collaboration and innovation beyond what we could achieve alone.

Happy Hacking!

Cobalt Strike Configuration and Customization options

We believe that flexibility is key to effective evasion and threat emulation. Cobalt Strike gives users the power to adapt—whether by tweaking malleable C2 profiles or going deeper with full customizations using our Arsenal Kit and Public Templates and Examples.

Whether you're modifying configurations or building custom implementations, you have the freedom to shape every stage of the attack chain.

Run-Time Evasion

Post-Exploitation

  • BOF-VS: A Beacon Object File (BOF) template for Visual Studio.
  • BOF Template: Core files needed to create a Beacon Object File for use with Cobalt Strike.

Network Comms

Misc

Community

  • Cobalt Strike Community Kit: The Cobalt Strike Community Kit is a curated repository of tools written by Cobalt Strike users and is another example of the level of community that sets Cobalt Strike apart from other C2 frameworks.

Our friends @ Fortra

Pinned Loading

  1. community_kit community_kit Public

    Cobalt Strike is a post-exploitation framework designed to be extended and customized by the user community. Several excellent tools and scripts have been written and published, but they can be cha…

    HTML 366 24

  2. bof_template bof_template Public

    A Beacon Object File (BOF) is a compiled C program, written to a convention that allows it to execute within a Beacon process and use internal Beacon APIs. BOFs are a way to rapidly extend the Beac…

    C 192 21

  3. aggressor_script_examples aggressor_script_examples Public

    This repository contains tips, tricks, and examples of aggressor script functions. The intent is to share bite size examples that can be used in other scripts.

    12 9

  4. Malleable-C2-Profiles Malleable-C2-Profiles Public

    Forked from rsmudge/Malleable-C2-Profiles

    Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable C2 profiles that you may use. These profiles work with Coba…

    218 35

  5. teamserver-prop teamserver-prop Public

    TeamServer.prop is an optional properties file used by the Cobalt Strike teamserver to customize the settings used to validate screenshot and keylog callback data, which allows you to tweak the fix…

    67 18

  6. ElevateKit ElevateKit Public

    Forked from rsmudge/ElevateKit

    The Elevate Kit demonstrates how to use third-party privilege escalation attacks with Cobalt Strike's Beacon payload.

    PowerShell 123 18

Repositories

Showing 10 of 21 repositories
  • community_kit Public

    Cobalt Strike is a post-exploitation framework designed to be extended and customized by the user community. Several excellent tools and scripts have been written and published, but they can be challenging to locate. Community Kit is a central repository of extensions written by the user community to extend the capabilities of Cobalt Strike. The…

    Cobalt-Strike/community_kit’s past year of commit activity
    HTML 366 Apache-2.0 24 0 0 Updated Jun 28, 2025
  • Malleable-C2-Profiles Public Forked from rsmudge/Malleable-C2-Profiles

    Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable C2 profiles that you may use. These profiles work with Cobalt Strike 3.x.

    Cobalt-Strike/Malleable-C2-Profiles’s past year of commit activity
    218 446 0 0 Updated Jun 27, 2025
  • .github Public
    Cobalt-Strike/.github’s past year of commit activity
    0 0 0 0 Updated Jun 27, 2025
  • sleepmask-vs Public

    A simple Sleepmask BOF example

    Cobalt-Strike/sleepmask-vs’s past year of commit activity
    C++ 118 Apache-2.0 23 0 0 Updated Jun 5, 2025
  • bof_template Public

    A Beacon Object File (BOF) is a compiled C program, written to a convention that allows it to execute within a Beacon process and use internal Beacon APIs. BOFs are a way to rapidly extend the Beacon agent with new post-exploitation features.

    Cobalt-Strike/bof_template’s past year of commit activity
    C 192 Apache-2.0 21 0 0 Updated Mar 18, 2025
  • callback_examples Public

    This contains a number of examples demonstrating how to use callback functions in supported aggressor script functions

    Cobalt-Strike/callback_examples’s past year of commit activity
    C 33 Apache-2.0 2 0 0 Updated Mar 17, 2025
  • bof-vs Public

    A Beacon Object File (BOF) template for Visual Studio

    Cobalt-Strike/bof-vs’s past year of commit activity
    C++ 203 Apache-2.0 27 2 1 Updated Mar 17, 2025
  • teamserver-prop Public

    TeamServer.prop is an optional properties file used by the Cobalt Strike teamserver to customize the settings used to validate screenshot and keylog callback data, which allows you to tweak the fix for the “HotCobalt” vulnerability. This repository contains an example file that contains the default settings.

    Cobalt-Strike/teamserver-prop’s past year of commit activity
    67 Apache-2.0 18 0 0 Updated Jul 16, 2024
  • Cobalt-Strike/obfuscator-llvm’s past year of commit activity
    C++ 54 55 0 0 Updated Jan 15, 2024
  • sleep_python_bridge Public

    This project is 'bridge' between the sleep and python language. It allows the control of a Cobalt Strike teamserver through python without the need for for the standard GUI client. NOTE: This project is very much in BETA. The goal is to provide a playground for testing and is in no way an officially support feature. Perhaps this could be somethi…

    Cobalt-Strike/sleep_python_bridge’s past year of commit activity
    Python 184 Apache-2.0 32 0 0 Updated Apr 12, 2023

People

This organization has no public members. You must be a member to see who’s a part of this organization.

Most used topics

Loading…