Hosting Files

Cobalt Strike’s web server can host your user-driven packages for you. From the menu, select Site Management -> Host File and perform the following to set up:

1. Choose the file to host
2. Select an arbitrary URL
3. Choose the mime type for the file.

By itself, the capability to host a file isn’t very impressive. However, in sections that follow, you will learn how to embed Cobalt Strike URLs into a spear phishing email. When you do this, Cobalt Strike can cross-reference visitors to your file with sent emails and include this information in the social engineering report.

Check Enable SSL to serve this content over SSL. This option is available when you specify a valid SSL certificate in your Malleable C2 profile.

 

Related Topics