How to Install Cobalt Strike on Kali Linux

How to Install Cobalt Strike on Kali Linux

by Malik korrich ~ mercredi 7 mai 2014

Dependencies

Kali Linux ships with the dependencies needed to use Cobalt Strike. The Metasploit Framework and Java are already setup for you.

Installation Steps

1. Start the postgresql database
   service postgresql start
2. (Optional) Make postgresql database start on boot
   update-rc.d postgresql enable
3. Start and stop the Metasploit service (this will setup your database.yml file for you)
   service metasploit start
service metasploit stop
4. Extract cobaltstrike-trial.tgz
   tar zxvf cobaltstrike-trial.tgz
5. Tell Kali Linux to use Java 1.7 by default
   32-bit Kali Linux:
   update-java-alternatives --jre -s java-1.7.0-openjdk-i386
   64-bit Kali Linx:
   update-java-alternatives --jre -s java-1.7.0-openjdk-amd64

How to run

1. Start the postgresql database (this is not automatic)
   service postgresql start
2. Run Cobalt Strike
   ./cobaltstrike
3. Press Connect
4. Press Yes when asked to start Metasploit

If you can't get Cobalt Strike to run, review our troubleshooting steps for more help.

How to update the Metasploit® Framework

Use msfupdate to update to the latest stable snapshot of the Metasploit® Framework. These stable snapshots are blessed by the Metasploit® team, not Strategic Cyber. Generally, they're compatible with Cobalt Strike and you shouldn't experience a problem.

Some Metasploit® Framework updates require changes to your database configuration. Use service metasploit start to start the Metasploit® service (which will automatically perform these steps). The Metasploit® service is not necessary to use Cobalt Strike. Use service metasploit stop to free the resources it uses. If you get a I can not find a database.yml. I *really* need it error--try this step to fix it

If an incompatability occurs, you may need to uninstall the Metasploit® Framework and reinstall it without the updates. If this is necessary, a note will go out to the Cobalt Strike Technical Notes Mailing List. Make sure you're subscribed.