cobalt-strike

Deploy Cobalt Strike Beacon implants with customizable C2 profiles.

15|1|Updated Feb 12, 2026
One-click install
npx skills add https://github.com/AeonDave/malskill --skill cobalt-strike
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: cobalt-strike
Source: https://github.com/AeonDave/malskill/tree/main/offensive-tools/c2/cobalt-strike
Command: npx skills add https://github.com/AeonDave/malskill --skill cobalt-strike

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides a powerful platform for simulating advanced threat groups and conducting professional red team engagements by leveraging a commercial adversary simulation tool.

Core Features & Use Cases

  • Adversary Simulation: Emulate sophisticated threat actor tactics, techniques, and procedures.
  • Teamserver Infrastructure: Manage multi-operator teamserver deployments for collaborative red teaming.
  • Beacon Implant: Utilize a versatile implant supporting various communication protocols and advanced execution methods.
  • Use Case: Execute a red team engagement simulating APT group TTPs, requiring advanced C2 obfuscation and in-memory execution of custom payloads.

Quick Start

Launch the Cobalt Strike teamserver with your IP, password, and an optional malleable profile.

Frequently Asked Questions about cobalt-strike

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I simulate advanced threat group tactics during a red team engagement?▼

Adversary simulation emulates sophisticated threat actor tactics, techniques, and procedures using a versatile Beacon implant and customizable C2 profiles to replicate APT group behaviors during red team operations.

What do I need to launch a teamserver for collaborative red teaming?▼

Launching a teamserver requires a commercial license, a Java runtime for client operations, your IP address, a password, and an optional malleable profile to manage multi-operator deployments.

How does the Beacon implant handle command and control communication?▼

The Beacon implant supports various communication protocols and advanced execution methods, utilizing customizable C2 profiles to achieve advanced obfuscation and in-memory execution of custom payloads.

Can I use this adversary simulation platform without a commercial license?▼

No, this adversary simulation platform requires a commercial license to operate, alongside a Java runtime environment for executing the client and managing teamserver infrastructure.

What is the best way to manage multi-operator red team deployments?▼

Multi-operator deployments are managed through the teamserver infrastructure, enabling collaborative red teaming by allowing multiple operators to connect and control Beacon implants simultaneously.