Alternatives and similar repositories for airborne

Users that are interested in airborne are comparing it to the libraries listed below

• EspressoCake / BOF_NativeAPI_Definitions-VSCode
  A VSCode plugin to assist with BOF development.
  ☆37Updated last year
• yamakadi / ldr
  A work in progress BOF/COFF loader in Rust
  ☆51Updated 2 years ago
• snovvcrash / BOFs
  Beacon Object Files (not Buffer Overflows)
  ☆57Updated 2 years ago
• EspressoCake / BetterPipename
  Example of using Sleep to create better named pipes.
  ☆41Updated 2 years ago
• EvanMcBroom / fuse-loader
  Load a dynamic library from memory using a fuse mount
  ☆31Updated 2 years ago
• EspressoCake / ReadRemoteProcessCommandline_BOF
  ☆29Updated last year
• Ne0nd0g / go-coff
  Load and execute a common object file format (COFF) in the current process
  ☆32Updated last year
• KingOfTheNOPs / EnableWebDAVClient-BOF
  Cobalt Strike Beacon Object File to enable the webdav client service on x64 windows hosts
  ☆23Updated 2 years ago
• farfella / in-memory-cpython
  An In-memory Embedding of CPython
  ☆31Updated 4 years ago
• Wh04m1001 / PICDumper
  ☆26Updated 3 years ago
• Hagrid29 / BOF-CredUI
  Cobalt Strike Beacon Object File (BOF) that uses CredUIPromptForWindowsCredentials API to invoke credential prompt
  ☆23Updated 3 years ago
• Teach2Breach / phantom_persist_rs
  Rust implementation of phantom persistence technique documented in https://blog.phantomsec.tools/phantom-persistence
  ☆62Updated 6 months ago
• eladshamir / BadWindowsService
  An insecurely implemented and installed Windows service for emulating elevation of privileges vulnerabilities
  ☆63Updated 3 years ago
• fin3ss3g0d / IoDllProxyLoad
  DLL proxy load example using the Windows thread pool API, I/O completion callback with named pipes, and C++/assembly
  ☆62Updated last year
• weaselsec / ClickOnce-AppDomain-Manager-Injection
  Click Once + App Domain
  ☆64Updated 2 years ago
• jsecu / ElevatedEvents
  ☆31Updated 3 years ago
• Allevon412 / SyscallTempering
  ☆29Updated last year
• d4rkiZ / EmbedExeLnk-
  EmbedExeLnk by x86matthew modified by d4rkiZ
  ☆41Updated 2 years ago
• Allevon412 / BreadManModuleStomping
  ☆44Updated 2 years ago
• Hackcraft-Labs / SharpShares
  Multithreaded C# .NET Assembly to enumerate accessible network shares in a domain
  ☆34Updated 2 years ago
• jojonas / SharpSAMDump
  SAM Dumping in C#
  ☆54Updated last month
• FalconForceTeam / bof-winrm-plugin-jump
  ☆32Updated 11 months ago
• rkbennett / pybof
  Python module for running BOFs
  ☆79Updated last month
• OffenseTeacher / Steganim
  ☆47Updated 2 years ago
• sakkis91 / SandboxPPL
  Golang PoC that sandboxes Defender (or other PPL) by setting its token integrity to Untrusted.
  ☆12Updated 7 months ago
• 0xTriboulet / emerald_template
  A cmake template for crystal palace
  ☆35Updated 2 weeks ago
• 0xbad53c / OffSecOps-Arsenal
  Aggressor script to automatically download and load an arsenal of open source and private Cobalt Strike tooling.
  ☆45Updated last year
• susMdT / AceLdr
  Cobalt Strike UDRL for memory scanner evasion.
  ☆52Updated 2 years ago
• postrequest / donut-rs
  Donut generator in rust.
  ☆27Updated 3 years ago
• cyndicatelabs / brc4_profile_maker
  An interactive TUI tool to create Brute Ratel C4 profiles based on BURP browsing data.
  ☆30Updated 7 months ago