Notice: There is a serious security flaw in Cobalt Strike 3.5 and below (2.x is deprecated and assumed affected as well). Please read the advisory for more details.


Notice: This content is for Cobalt Strike 2.5. It's kept here for users working with the old version. The homepage for the latest Cobalt Strike is at

Website Clone Tool

Cobalt Strike's website clone tool clones an existing site and hosts it locally. You may embed a client-side attack or capture keystrokes with this tool as well

To clone a website, go to Attacks -> Web Drive-by -> Clone Site.