5 Installing Cobalt Strike / Installing OpenJDK TIP: If you are seeing a JRELoadError message this is because the JavaAppLauncher stub included with Cobalt Strike loads a library from a set path to run the JVM within the stub process. Issue the following command to fix this error: sudo ln -fs /Library/Java/JavaVirtualMachines/jdk jdk /Library/Internet\ Plug-Ins/JavaAppletPlugin.plugin Replace jdk jdk with your Java path. The next Cobalt Strike release will use a Java Application Stub for MacOS X that is more flexible. Windows 1. Download OpenJDK for Windows/x64 at: 2. Extract the archive to c:\program files\jdk Add c:\program files\jdk-11.0.\bin to your user's PATH environment variable: a. Go to Control Panel-> System-> Change Settings-> Advanced-> Environment Variables... b. Highlight Path in User variables for user. c. Press Edit. d. Press New. e. Type: c:\program files\jdk \bin. f. Press OK on all dialogs. Installing Cobalt Strike Follow these instructions to install Cobalt Strike. NOTE: The Cobalt Strike Distribution Package (steps 1 and 3) contains the OS-specific Cobalt Strike launcher(s), supporting files, and the updater program. It does not contain the Cobalt Strike program itself. Running the Update Program (step 4) downloads the Cobalt Strike product and performs the final installation steps. 1. Download a Cobalt Strike distribution package for a supported operating system. (an is provided with a link to the download) 2. Setup a recommended Java environment. (see Installing OpenJDK on page 4 for instructions) 3. Extract, mount or unzip the distribution package. Based on the operating system perform one of the following. a. For Linux: i. Extract the cobaltstrike-dist.tgz: tar zxvf cobaltstrike-dist.tgz b. For MacOS X: Installation Guide page: 5
6 After You are Done / Next Steps i. Double-click the cobaltstrike-dist.dmg file to mount it. ii. Drag the Cobalt Strike folder to the Applications folder. c. For Windows: i. Disable anti-virus before you install Cobalt Strike. ii. Use your preferred zip tool to extract the cobaltstike.zip file to an install location. 4. Run the update program to finish the install. Based on the operating system perform one of the following. a. For Linux: i. Enter the following commands: cd /path/to/cobaltstrike./update b. For MacOS X: i. Navigate to the Cobalt Strike folder. ii. Double-click Update Cobalt Strike.command. c. For Windows: i. Navigate to the Cobalt Strike folder. ii. Double-click update.bat. Make sure you update both your team server and client software with your license key. Cobalt Strike is generally licensed on a per user basis. The team server does not require a separate license. After You are Done Congratulations! Cobalt Strike is now installed. Read the following for additional information and your next steps. Next Steps Refer to the user guide for information about starting the Cobalt Strike Team Server and Cobalt Strike Client. Installation Guide page: 6
I will also need to setup two new file provisioners to move cobaltstrike.zip and the webbug_getonly.profile files from the operator host machine, to the /tmp directory on the team-server instance. But first I will need to install Java on the team-server instance first.
The above command will generate the acme.store file that will be used as part of the C2 profile, so I will move it to the /opt/cobaltstrike4.4/ directory. The last command to run will be to start the teamserver using the acme.store and the webbug_getonly.profile.
df19127ead