Comments

Tuesday, December 10, 2013

Cobalt Strike Report Hosts *Mod*

Posted by at Tuesday, December 10, 2013 Read our previous post

armitage-logo

Cobalt Strike has a nice Funktion called Report Hosts.

All “HOST/PORTS/OS/HASHS/EXPLOITS” informations exported into a single pdf file.

reportingtwoways

Now i want to change the Logo on the Top “you cant see it in the Sample Pic sry”

Original PDF Banner

Cobalt Strike logo

My New PDF Banner

logo2

Cobal Strike is coded in Java we can simple extract the *jar file with 7zip or other tools.

27.09.2012  14:26    <DIR>          armitage
27.09.2012 14:26 <DIR> cloudstrike
23.07.2010 09:00 <DIR> com
27.09.2012 14:26 <DIR> console
27.09.2012 14:26 <DIR> cortana
23.12.2011 17:48 <DIR> de
27.09.2012 14:26 <DIR> dns
27.09.2012 14:26 <DIR> endpoint
27.09.2012 14:26 <DIR> graph
27.09.2012 14:26 <DIR> images
19.11.2006 23:41 <DIR> javax
06.08.2005 17:14 <DIR> java_cup
04.09.2012 19:10 28.830 libtapmanager.so
04.09.2012 19:10 34.685 libtapmanager64.so
27.09.2012 14:26 <DIR> license
16.05.2004 02:02 10.317 LICENSE.txt
13.12.2010 18:49 574 log4j.properties
23.07.2012 09:11 <DIR> mail
27.09.2012 14:26 <DIR> META-INF
27.09.2012 14:26 <DIR> msf
14.11.2011 14:21 <DIR> nl
16.05.2004 02:02 622 NOTICE.TXT
02.07.2010 14:04 <DIR> org
27.09.2012 14:26 <DIR> profiler
27.09.2012 14:26 <DIR> report
27.09.2012 14:26 <DIR> resources
27.09.2012 14:26 <DIR> scripts
27.09.2012 14:26 <DIR> scripts-cortana
24.05.2009 00:19 <DIR> sleep
27.09.2012 14:26 <DIR> ssl
27.09.2012 14:26 <DIR> table
27.09.2012 14:26 <DIR> tap
27.09.2012 14:26 <DIR> template
27.09.2012 14:26 <DIR> templates
27.09.2012 14:26 <DIR> tree
27.09.2012 14:26 <DIR> ui

After cobalt strike extract we can see the folder /images/ now we can change the logo and simple repack it into a .jar file.


Now We can start Cobalt Strike again with your new logo.


Before:


Activity Report by gotr00t


After :


Hosts Report by gotr00t


 


Have pfun if anybody need it ;)

2 comments:

  1. There's a documented option to change this banner to an image of your choosing (and edit the blue color used in the report too). It's at the end of the manual.

    ReplyDelete
  2. Thanks for the info ;)

    ReplyDelete

[#] iNFO [#]

All the information provided on this site is for educational purposes only.
 
The site and it's author is in no way responsible for any misuse of the information.
©2012 Security is just an Illusion is powered by Blogger - Template designed by Stramaxon - Best SEO Template