Cobalt Strike 4.5 is now available.

[AMRED]

This release sees new options for process injection, updates to the sleep mask and UDRL kits, evasion improvements and a command history update along with other, smaller changes.

Security Updates​

Before getting into the details of the release, I just wanted to impress upon you how seriously we take product security. We dedicated a significant portion of this release to improving controls around product licensing. We are fully committed to improving the security of the product and will continue to make product security enhancements a priority in future releases.

Process Injection​

Until now, Cobalt Strike's only process injection option was the built-in fork & run technique. While this is good for stability, it limits OPSEC options. We have added two new Aggressor Script hooks ( PROCESS_INJECT_SPAWN and PROCESS_INJECT_EXPLICIT ) to allow you to define how the fork & run and explicit injection techniques are implemented when executing post exploitation commands. A new BOF along with an Aggressor Script function implements both of these new techniques. You will now have the option of using the built-in fork & run technique or creating your own process injection technique.

source https://www.cobaltstrike.com/blog/cobalt-strike-4-5-fork-run-youre-history/

 

[AMRED]

Security Updates​

Before getting into the details of the release, I just wanted to impress upon you how seriously we take product security. We dedicated a significant portion of this release to improving controls around product licensing. We are fully committed to improving the security of the product and will continue to make product security enhancements a priority in future releases.

looks like you got a challenge my fellow crackers