Proof-of-concept implementation of AI-enabled postex DLLs
☆97Sep 10, 2025Updated last year
Alternatives and similar repositories for ai-postex
Users that are interested in ai-postex are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A BOF that's a BOF Loader and more☆213Apr 6, 2026Updated 7 months ago
- Windows C/C++ development environment on Linux☆18Mar 29, 2026Updated 7 months ago
- A cmake template for crystal palace☆49Dec 20, 2025Updated 10 months ago
- One WSL BOF to rule them all☆190Jan 14, 2026Updated 9 months ago
- Bof of RegPwn by MDSec☆130Mar 15, 2026Updated 7 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Busybox-style Beacon Object Files for *nix post-exploitation. Reimplements common Unix utilities as BOFs for use in stripped environments…☆84Aug 22, 2026Updated 2 months ago
- A PICO for Crystal Palace that implements CLR hosting to execute a .NET assembly in memory.☆146Jan 28, 2026Updated 9 months ago
- Post-ex tool to interact with chromium browser when CDP is enabled☆47May 15, 2026Updated 5 months ago
- Remote BOF Runner is a Havoc extension framework for remote execution of Beacon Object Files (BOFs) using a PIC loader made with Crystal …☆102Jan 2, 2026Updated 10 months ago
- A simple POC to show how to chain multiple callbacks via tail calls to artificially construct a call stack☆114May 25, 2026Updated 5 months ago
- BOF POC of the DSCourier project / invoking WinGet via COM☆90Apr 23, 2026Updated 6 months ago
- A Cobalt Strike BOF implementation of the SilentHarvest registry dumping technique☆185Apr 14, 2026Updated 6 months ago
- BOF to impersonate TrustedInstaller via DISM API trigger and thread impersonation☆136Mar 27, 2026Updated 7 months ago
- UDC2 implementation that provides an ICMP C2 channel☆132Nov 24, 2025Updated 11 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Moonwalk++: Simple POC Combining StackMoonwalking and Memory Encryption☆240Dec 17, 2025Updated 10 months ago
- Beacon Object File (BOF) for Using the BadSuccessor Technique for Account Takeover☆91Oct 20, 2025Updated last year
- The standard Go net.Conn interface using Azure Storage services as the transport layer.☆32Oct 26, 2026Updated last week
- Async BOF to automatically extract or renew Kerberos TGTs on a target system.☆139Jul 23, 2026Updated 3 months ago
- A small collection of Crystal Palace PIC loaders designed for use with Cobalt Strike☆249Apr 11, 2026Updated 6 months ago
- crystal palace + draugr function hook definition generator☆17Jan 27, 2026Updated 9 months ago
- Reimplementing Havoc Pro Runtime Channel Switching and Cobalt Strike UDC2 features.☆57Oct 11, 2026Updated 3 weeks ago
- A PoC UDRL for Cobalt Strike built with Crystal Palace that combines Raphael Mudge's page streaming technique with a modular call gate (D…☆141Jan 21, 2026Updated 9 months ago
- abusing windows toast notifications for fun and user manipulation☆106Jul 11, 2026Updated 3 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Beacon Object Files (BOFs) for Cobalt Strike and Havoc C2. Implementations of Active Directory attacks and post-exploitation techniques.☆117Jan 26, 2026Updated 9 months ago
- A Beacon Object File (BOF) for Havoc/CS to Bypass PPL and Dump Lsass☆179Sep 22, 2025Updated last year
- SilentChrome-BOF installs Chromium extension, native messaging, and Isolated Web App profile artifacts☆53Aug 10, 2026Updated 2 months ago
- Crystal Palace library for proxying Nt API calls via the Threadpool☆106Oct 18, 2025Updated last year
- BAADTokenBroker is a post-exploitation tool designed to interact with Microsoft Entra ID device-bound keys.☆82Apr 11, 2026Updated 6 months ago
- Ludus role for deploying a Cobalt Strike Teamserver onto Linux servers☆19Mar 19, 2025Updated last year
- C2-agnostic BOF collection, categorized by attack chain phase. Designed to be small and modular, allowing for quick execution and automat…☆321Oct 17, 2026Updated 3 weeks ago
- adws enumeration bof☆176Sep 1, 2026Updated 2 months ago
- Cobalt Strike UDC2 implementation that provides an Slack C2 channel☆71Jan 5, 2026Updated 10 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Beacon Object File (BOF) port of DumpGuard for extracting NTLMv1 hashes from sessions on modern Windows systems.☆223Jan 6, 2026Updated 10 months ago
- Prime a process for injection when S1 is present☆13Feb 8, 2025Updated last year
- An alternative to the builtin clipboard feature in Cobalt Strike that adds the capability to enable/disable and dump the clipboard histor…☆117Apr 16, 2026Updated 6 months ago
- An example reference design for a proposed BOF PE☆251Jan 23, 2026Updated 9 months ago
- ☆195Oct 21, 2025Updated last year
- Local SYSTEM auth trigger for relaying - X☆172Jul 23, 2025Updated last year
- Linker for Beacon Object Files☆193Oct 20, 2026Updated 2 weeks ago