cobalt-strike

Deploy Cobalt Strike Beacon implants with customizable C2 profiles.

15|1|Updated Feb 12, 2026
One-click install
npx skills add https://github.com/AeonDave/malskill --skill cobalt-strike
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: cobalt-strike
Source: https://github.com/AeonDave/malskill/tree/main/offensive-tools/c2/cobalt-strike
Command: npx skills add https://github.com/AeonDave/malskill --skill cobalt-strike

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides a powerful platform for simulating advanced threat groups and conducting professional red team engagements by leveraging a commercial adversary simulation tool.

Core Features & Use Cases

  • Adversary Simulation: Emulate sophisticated threat actor tactics, techniques, and procedures.
  • Teamserver Infrastructure: Manage multi-operator teamserver deployments for collaborative red teaming.
  • Beacon Implant: Utilize a versatile implant supporting various communication protocols and advanced execution methods.
  • Use Case: Execute a red team engagement simulating APT group TTPs, requiring advanced C2 obfuscation and in-memory execution of custom payloads.

Quick Start

Launch the Cobalt Strike teamserver with your IP, password, and an optional malleable profile.

Frequently Asked Questions about cobalt-strike

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I simulate advanced threat group tactics during a red team engagement?

Adversary simulation emulates sophisticated threat actor tactics, techniques, and procedures using a versatile Beacon implant and customizable C2 profiles to replicate APT group behaviors during red team operations.

What do I need to launch a teamserver for collaborative red teaming?

Launching a teamserver requires a commercial license, a Java runtime for client operations, your IP address, a password, and an optional malleable profile to manage multi-operator deployments.

How does the Beacon implant handle command and control communication?

The Beacon implant supports various communication protocols and advanced execution methods, utilizing customizable C2 profiles to achieve advanced obfuscation and in-memory execution of custom payloads.

Can I use this adversary simulation platform without a commercial license?

No, this adversary simulation platform requires a commercial license to operate, alongside a Java runtime environment for executing the client and managing teamserver infrastructure.

What is the best way to manage multi-operator red team deployments?

Multi-operator deployments are managed through the teamserver infrastructure, enabling collaborative red teaming by allowing multiple operators to connect and control Beacon implants simultaneously.