Tutorials

These tutorials show how you can utilize dissect.cobaltstrike for some specific use cases.

• A Minimal Beacon Client
  • Installation
  • Basic client
    • Task handler
    • Parsing Task data
    • Sending Callbacks
  • Subclassed client
  • Next steps
• Decrypt Cobalt Strike PCAPs
  • Installation
  • Getting the Beacon
  • RSA Private Key
  • Decrypt C2 Traffic
  • Export C2 traffic as records
  • Dumping records with rdump