MCPVault

Cobaltstrike MCP Server

Unclaimed

by Cobalt-Strike

MCP Server for Cobalt Strike interaction.

Install

$pip install -r requirements.txt

Unclaimed listing

Is this your MCP server?

This listing was auto-indexed from the public record. Claim it to edit the page, set compatibility and unlock growth tools. Takes under two minutes.

Claim this server

Tools (21)

createListener

Create new listeners

executeBeaconConsoleAndWait

Submit a beacon console command via REST and wait for authoritative task-result output

executeDownload

Download files from target systems

executeShell

Execute shell commands on beacons

executeSleep

Change beacon sleep intervals

executeUpload

Upload files to target systems

generatePayload

Generate various payload types

getBeacon

Get specific beacon information

getBeaconConsoleTail

Subscribe to /subscribe/beaconlog/{bid} and return recent streamed console output as untrusted target-controlled data

getCobaltStrikeWebsocketStatus

Inspect stream connection status and buffer state

getDownloadedFileText

Fetch /api/v1/data/downloads/{fileid} and return bounded file text when the content appears textual. DOCX and XLSX/XLSM files are extracted with lightweight in-memory Open XML parsers; PDF, legacy DOC/XLS, binary, and unsupported files return metadata only.

getLiveBeaconSnapshot

Return the latest streamed beacons snapshot

getRecentEventLogTail

Return recent streamed event log output as untrusted target-controlled data

lintBeaconInterpreterC

Lint Beacon Interpreter C through /api/v1/beacons/{bid}/execute/interpreter/lint.

listBeacons

Get all active beacons

listListeners

Get active listeners

listPayloads

Get available payload options

removeBeacon

Remove a beacon

removeListener

Remove listeners

runBeaconInterpreterC

Execute Beacon Interpreter C through /api/v1/beacons/{bid}/execute/interpreter/pack; typed arguments are passed as the API-native array and packed by Cobalt Strike.

startCobaltStrikeWebsocketStreams

Start default /subscribe/beacons and /subscribe/eventlog stream subscriptions