Cobalt strike 4.7 Original

[JinnX93]

Hi,

I just found cobalt strike 4.7 Original cracked version on this chinese website!

https://www.ddosi.org/cobalt-strike-4-7/

But I didn't give it a try yet! clean or infected I'm not sure.

Have a look at it

 

[donsalas]

cobalt strike 4.7.2 or the unpatched one ?

 

[Aquari2]

I think the unpatched version if its Original. thx

 

[xebec]

it's to bad to use it , becarful with CVE-2022-39197 vul on it

 

[JinnX93]

it's to bad to use it , becarful with CVE-2022-39197 vul on it

Tried it in vm with win 11! looks good and clean!

 

[xebec]

Tried it in vm with win 11! looks good and clean!

it's not about clean , it's about when you be in someone else pc they can use this vul against you

 

[xebec]

Tried it in vm with win 11! looks good and clean!

search on youtube using "CVE-2022-39197 cobalt strike" to understand

 

[kiloton]

Tried it in vm with win 11! looks good and clean!

Did you even understand the meaning of CVE-2022-39197?
This doesn't matter if the .jar is original or not, it's a bug in the
engine that allows RCE on your team server.
So you will be pwned by researchers and all targets stolen or reported.

GitHub - its-arun/CVE-2022-39197: CobaltStrike <= 4.7.1 RCE

CobaltStrike <= 4.7.1 RCE. Contribute to its-arun/CVE-2022-39197 development by creating an account on GitHub.

github.com

GitHub - xzajyjs/CVE-2022-39197-POC: CVE-2022-39197(CobaltStrike XSS <=4.7) POC

CVE-2022-39197(CobaltStrike XSS <=4.7) POC. Contribute to xzajyjs/CVE-2022-39197-POC development by creating an account on GitHub.

github.com

 

[r1z]

cobalt strike 4.7.2 or the unpatched one ?

Totally yes, un-secured version (china home of backdoors --> ddosi.org) and vulnerable to remote code execution vulnerablity

Tried it in vm with win 11! looks good and clean!

99% you like to run everything available in public) learn before advice people.

 

[xebec]

Totally yes, un-secured version (china home of backdoors --> ddos.org) and vulnerable to remote code execution vulnerablity

Посмотреть вложение 49996


99% you like to run everything available in public) learn before advice people.

this what i am talking about , thanks r1z

 

[bibz]

Ребята, я не советую вам трогать китайскую версию. Большинство CS, которые я нашел, были заражены.

 

[Borte]

Thanks, I do appreciate this extra information!

 

[Guest]

Absolute infected shit

 

[c0nm4n]

just because it's Chinese and cracked, I'm sure there's a surprise in the file, but thanks anyway