Right. Now we can get on and create some listeners.
So we can do that by going to Cobalt Strike
and Listeners or by clicking the little
headphones icon.
Now most things in Cobalt Strike,
they open a new tab down here,
and you can obviously flick between them.
To create a listener, we will hit add.
And first off, I'm going to create an HTTP listener.
I will just call it HTTP.
And in my hosts, I will say nickel viper dot com.
So this is
a domain that I've preconfigured the lab with.
If you come out to the Snap Labs dashboard, go
to apps and power DNS.
You can log in with admin
admin.
And down here, you can see I've got a domain entry,
nickel viper dot com.
And if we go into that,
we can see that it points to ten ten five fifty,
which is the Linux VM.
You can add your own domain names if you like.
You can add your own subdomains
and other DNS entries in here.
As long as they eventually point back to ten ten five
fifty, you should be good.
And, of course, the
machines in the lab are configured to use PowerDNS as a
DNS resolver.
So that's how that hooks hooks together.
So now that we're done here, let's hit save.
I'm also going to go ahead and create a DNS listener.
And in here, I will put,
pix dot nickel viper dot com.
And that comes from here as well.
So I have this DNS record
that says that n s one dot nickel viper dot com is
authoritative for, the PIX sub subdomain.
And this n s one record also resolves back to the Linux VM,
which is where the team server will be listening.
I'll
also create
two TCP listeners.
So
one that will bind to all interfaces.
And one that will bind to local host only.
Oops. TCP local.
And, finally,
an SMB listener.
And for the pipe name,
we want to choose something that will blend into Windows.
So this default
MS agent
is not good to use because it's
cobalt strikes default.
If we list the pipes on a machine,
we can choose something that is gonna look like, it belongs.
So these mojo ones could be a good choice.
I'm gonna go with,
this TSVC pipe,
And I'm just going to change the last four characters.
Let's say, just one three three seven.
Just something for us to recognize it by.
And that's all we have to do to set up the listeners.