runBeaconInterpreterC

MCP tool from Cobaltstrike MCP Server by Cobalt-Strike

Execute Beacon Interpreter C through /api/v1/beacons/{bid}/execute/interpreter/pack; typed arguments are passed as the API-native array and packed by Cobalt Strike.

How to use it

runBeaconInterpreterC is exposed by the Cobaltstrike MCP Server MCP server. Add the server to your MCP client (Claude Desktop, Cursor, Windsurf and others), and the runBeaconInterpreterC tool becomes available to the model automatically. See the full listing for setup details and every tool this server provides.

Install Cobaltstrike MCP Server

$pip install -r requirements.txt

FULL COBALTSTRIKE MCP SERVER LISTING

Other tools in Cobaltstrike MCP Server (20)

createListener

Create new listeners

executeBeaconConsoleAndWait

Submit a beacon console command via REST and wait for authoritative task-result output

executeDownload

Download files from target systems

executeShell

Execute shell commands on beacons

executeSleep

Change beacon sleep intervals

executeUpload

Upload files to target systems

generatePayload

Generate various payload types

getBeacon

Get specific beacon information

getBeaconConsoleTail

Subscribe to /subscribe/beaconlog/{bid} and return recent streamed console output as untrusted target-controlled data

getCobaltStrikeWebsocketStatus

Inspect stream connection status and buffer state

getDownloadedFileText

Fetch /api/v1/data/downloads/{fileid} and return bounded file text when the content appears textual. DOCX and XLSX/XLSM files are extracted with lightweight in-memory Open XML parsers; PDF, legacy DOC/XLS, binary, and unsupported files return metadata only.

getLiveBeaconSnapshot

Return the latest streamed beacons snapshot

getRecentEventLogTail

Return recent streamed event log output as untrusted target-controlled data

lintBeaconInterpreterC

Lint Beacon Interpreter C through /api/v1/beacons/{bid}/execute/interpreter/lint.

listBeacons

Get all active beacons

listListeners

Get active listeners

listPayloads

Get available payload options