Cobalt Strike Report Hosts *Mod*

Posted by Security is just an illusion at Tuesday, December 10, 2013 Read our previous post

Cobalt Strike has a nice Funktion called Report Hosts.

All “HOST/PORTS/OS/HASHS/EXPLOITS” informations exported into a single pdf file.

Now i want to change the Logo on the Top “you cant see it in the Sample Pic sry”

Original PDF Banner

My New PDF Banner

Cobal Strike is coded in Java we can simple extract the *jar file with 7zip or other tools.

27.09.2012  14:26    <DIR>          armitage
27.09.2012  14:26    <DIR>          cloudstrike
23.07.2010  09:00    <DIR>          com
27.09.2012  14:26    <DIR>          console
27.09.2012  14:26    <DIR>          cortana
23.12.2011  17:48    <DIR>          de
27.09.2012  14:26    <DIR>          dns
27.09.2012  14:26    <DIR>          endpoint
27.09.2012  14:26    <DIR>          graph
27.09.2012  14:26    <DIR>          images
19.11.2006  23:41    <DIR>          javax
06.08.2005  17:14    <DIR>          java_cup
04.09.2012  19:10            28.830 libtapmanager.so
04.09.2012  19:10            34.685 libtapmanager64.so
27.09.2012  14:26    <DIR>          license
16.05.2004  02:02            10.317 LICENSE.txt
13.12.2010  18:49               574 log4j.properties
23.07.2012  09:11    <DIR>          mail
27.09.2012  14:26    <DIR>          META-INF
27.09.2012  14:26    <DIR>          msf
14.11.2011  14:21    <DIR>          nl
16.05.2004  02:02               622 NOTICE.TXT
02.07.2010  14:04    <DIR>          org
27.09.2012  14:26    <DIR>          profiler
27.09.2012  14:26    <DIR>          report
27.09.2012  14:26    <DIR>          resources
27.09.2012  14:26    <DIR>          scripts
27.09.2012  14:26    <DIR>          scripts-cortana
24.05.2009  00:19    <DIR>          sleep
27.09.2012  14:26    <DIR>          ssl
27.09.2012  14:26    <DIR>          table
27.09.2012  14:26    <DIR>          tap
27.09.2012  14:26    <DIR>          template
27.09.2012  14:26    <DIR>          templates
27.09.2012  14:26    <DIR>          tree
27.09.2012  14:26    <DIR>          ui

After cobalt strike extract we can see the folder /images/ now we can change the logo and simple repack it into a .jar file.

Now We can start Cobalt Strike again with your new logo.

Before:

Activity Report by gotr00t

After :

Hosts Report by gotr00t

 

Have pfun if anybody need it ;)