Ryan Linn is back with another video. This time he explores a new commercial tool that has been spawned from a free tool. But in a twist, this one comes from the same man who wrote the free version. Got to love an entrepreneurial spirit!

Let us know what you think about the tool, it's cost, plans to give it a try or anything else that hits your brain.

Permanent link: [Article]-Video Review: Cobalt Strike Penetration Testing Software


Don

Just to be clear, Cobalt Strike leverages Metasploit for a lot of it's attacks.  It's a further development for the Armitage front end that acts as a Java based front end for Metasploit, but Cobalt Strike has addressed a lot of the workflow, reporting, and other automation that isn't easy from within Armitage, Metasploit base install or other tools that leverage Metasploit.  Cobalt Strike is a step forward from just "using Metasploit" to letting a Pen Tester take advantage of the framework core functions, but allowing a lot of the things that become tedious to be made easy through the GUI interface.  It is session aware, allows you to set easy pre-sets that are selectable, allow you to run exploits against groups of hosts, and other things that the other tools just don't let you do as easily.