Ansible Cobalt Strike (Docker)

Install Cobalt Strike in Docker

This role is part of the Warhorse Automation Framework. You can use this role with Warhorse or on its own.

Docker Image

ghcr.io/warhorse/docker-cobaltstrike

Role Variables

You can find all the variable settings in ./defaults/main.yml.

• cs_dir: Directory for the Cobalt Strike container
• cs_ports: Ports for the Cobalt Strike container
• cs_hostname: Hostname for the Cobalt Strike container
• cs_container_name: Name for the Cobalt Strike container
• cs_key: License key for Cobalt Strike teamserver (REQUIRED)
• cs_password: Password for Cobalt Strike teamserver (REQUIRED)
• cs_exp_date: Expiration date for Cobalt Strike beacon (REQUIRED)
• cs_profile_location: Location of your Cobalt Strike profile file
• cs_docker_network: Docker network for the Cobalt Strike container

Dependencies

To install the required dependencies, run:

ansible-galaxy install geerlingguy.docker geerlingguy.pip

Install

To install this role, run:

ansible-galaxy install warhorse.cobaltstrike_docker

Example Playbook

Here's a simple playbook example:

- hosts: servers
  roles:
      - { role: warhorse.cobaltstrike_docker }

Example Variables

Here is an example of how to set the necessary variables:

cs_hostname: "cobaltstrike"
cs_container_name: "cobaltstrike"
cs_key: '000-000-000-000-000'
cs_password: 'Password'
cs_exp_date: '2020-12-20'
cs_profile_location: 'clean.profile.j2'
cs_docker_network: "cobaltstrike"
cs_dir: '/opt/docker/cobaltstrike'
cs_ports:
  - "50050:50050"
  - "80:80"
  - "443:443"

License

MIT/BSD

Author Information

Ralph May