cs-dns-stager.py is a quick & dirty tool I wrote to retrieve a Cobalt Strike DNS beacon from its server, if you only have the IP address of said server.
If you want to know more about Cobalt Strike and DNS, watch this video I recorded:
Article Link: New Tool: cs-dns-stager.py | Didier Stevens