Install Cobalt Strike on Kali Linux

on February 13, 2014

Dependencies

Kali Linux ships with the dependencies needed to use Cobalt Strike. The Metasploit Framework and Java are already setup for you.

Installation Steps

  1. Start the postgresql database
    service postgresql start
  2. (Optional) Make postgresql database start on boot
    update-rc.d postgresql enable
  3. Start and stop the Metasploit service (this will setup your database.yml file for you)
    service metasploit start 
    service metasploit stop
  4. Extract cobaltstrike-trial.tgz
    tar zxvf cobaltstrike-trial.tgz
  5. Tell Kali Linux to use Java 1.7 by default
    32-bit Kali Linux:
    update-java-alternatives --jre -s java-1.7.0-openjdk-i386
    64-bit Kali Linx:
    update-java-alternatives --jre -s java-1.7.0-openjdk-amd64

How to run

  1. Start the postgresql database (this is not automatic)
    service postgresql start
  2. Run Cobalt Strike
    ./cobaltstrike
  3. Press Connect
  4. Press Yes when asked to start Metasploit
If you can't get Cobalt Strike to run, review our troubleshooting steps for more help.

How to update the Metasploit® Framework


Use msfupdate to update to the latest stable snapshot of the Metasploit® Framework. These stable snapshots are blessed by the Metasploit® team, not Strategic Cyber. Generally, they're compatible with Cobalt Strike and you shouldn't experience a problem.
Some Metasploit® Framework updates require changes to your database configuration. Use service metasploit start to start the Metasploit® service (which will automatically perform these steps). The Metasploit® service is not necessary to use Cobalt Strike. Use service metasploit stop to free the resources it uses. If you get a I can not find a database.yml. I *really* need it error--try this step to fix it
If an incompatability occurs, you may need to uninstall the Metasploit® Framework and reinstall it without the updates. If this is necessary, a note will go out to the Cobalt Strike Technical Notes Mailing List. Make sure you're subscribed.

1 comments:

Post a Comment