攻防中用到的BOF
☆11Dec 5, 2025Updated 10 months ago
Alternatives and similar repositories for BOF24
Users that are interested in BOF24 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A generic x64 indirect syscall template for RED TEAM OPSEC☆12Feb 3, 2025Updated last year
- 通过劫持explorer的CreateProcess来实现对子进程的全局hook，并对一些敏感api进行hook，来进行快速样本分析（如拿c2等操作）☆10Oct 21, 2023Updated 3 years ago
- [AdaptixC2] 多语言支持☆20Oct 30, 2025Updated 11 months ago
- 可以指定状态码和标题以排除不想要的数据，支持从管道符传入参数，根据cms类型来做总结输出☆15Nov 19, 2024Updated last year
- Sophisticated In-Memory PE loader for Cobalt Strike☆24Jan 24, 2026Updated 9 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- 获取域控权限方法枚举☆13May 8, 2022Updated 4 years ago
- 批量生成修改的图标+数字签名+详细说明后的PE文件☆19Aug 20, 2024Updated 2 years ago
- A Beacon Object File for decrypting Chrome App-Bound Encryption masterkeys in-memory via Cobalt Strike☆19Jul 14, 2025Updated last year
- Lsass memory dump.☆54Dec 7, 2023Updated 2 years ago
- 10.15免杀绕过defender 360☆19Oct 16, 2023Updated 3 years ago
- 基于个人习惯使用C/C++的shellcode开发项目模板☆49Aug 20, 2024Updated 2 years ago
- 一款基于Rust的使用Indirect syscall、Threadless Injection、PPID Spoof等多种先进的免杀技术相互结合实现 shellcode 加载器☆16Jan 3, 2026Updated 9 months ago
- 🛡️ 蓝队应急响应 / Linux 失陷主机一键排查。纯 Bash 单文件,零依赖,45 个检查模块 + 7 类隧道检测 + 6 类暴力破解 + 攻击路径时间线 + JSON-lines 日志 + 风险评分 + 横向移动证据链。集成 NOP Team 手册 v2.0.2 …☆28Jul 19, 2026Updated 3 months ago
- ☆17Updated this week
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- 适用于某EHR&HRM的加解密工具，可直接用于sqlmap☆26Jan 14, 2024Updated 2 years ago
- 用于在网站文件中快速查找数据库配置文件☆77Aug 30, 2021Updated 5 years ago
- eBSploit适用于内网渗透中遇到MS17-010漏洞的情况快速上线公网msf及cs，同时支持自定义dll命令执行、会话迁移等操作。☆62Aug 18, 2024Updated 2 years ago
- ☆28Aug 12, 2023Updated 3 years ago
- 解决使用默认密码webshell的问题☆26Jan 20, 2022Updated 4 years ago
- AiYue_Pro 是一款专为 Burp Suite 设计的高级被动扫描插件，旨在自动化检测 越权漏洞 (IDOR / Broken Access Control)。 它结合了多账号并发重放、智能染色和 AI 大模型深度分析技术，能够精准识别低权限或未授权账号是否能访问高…☆15Mar 19, 2026Updated 7 months ago
- ☆50Aug 28, 2021Updated 5 years ago
- 手工实现socks5协议，加密过流量检测☆47Oct 5, 2022Updated 4 years ago
- 离线IP Whois查询工具。可根据IP查询所属IP段信息、根据关键词查询IP段信息的MCP版本☆30Oct 28, 2025Updated 11 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Zerologon自动化脚本☆98Sep 20, 2023Updated 3 years ago
- 通过生成不同hash的ico并写入程序中，实现批量bypass360QVM☆259Aug 10, 2023Updated 3 years ago
- ☆47Dec 1, 2024Updated last year
- SAMR修改域内主机密码☆10Feb 27, 2022Updated 4 years ago
- 新免杀方向 Mimikatz（猕猴桃） 免杀 360，火绒，电脑管家，WindowsDefinder，详细使用教程请参考博客：https://www.vpss.cc/381.html☆26Mar 4, 2024Updated 2 years ago
- Shellcode Reductio Entropy Tools☆72Oct 8, 2023Updated 3 years ago
- Godzilla（哥斯拉）-添加了profile功能以及修改了一些界面的小细节☆13Jan 22, 2025Updated last year
- BOF implementations of CVE-2024-26229 for Cobalt Strike and BruteRatel☆29Jun 13, 2024Updated 2 years ago
- ☆10Aug 24, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- CVE-2018-2628漏洞工具包☆10Oct 30, 2018Updated 7 years ago
- zip slip☆39Apr 7, 2023Updated 3 years ago
- 基于 OPSEC 的 CobaltStrike 后渗透自动化链☆448Mar 11, 2024Updated 2 years ago
- ☆12Mar 27, 2020Updated 6 years ago
- 基于协程并发的Web敏感文件扫描器，精准探测备份文件、配置泄露及版本控制目录暴露风险，为渗透测试与安全防护提供专业级资产测绘方案。☆12Mar 6, 2025Updated last year
- A method of bypassing EDR's active projection DLL's by preventing entry point exection☆24May 10, 2021Updated 5 years ago
- FnOS目录穿越漏洞利用☆15Feb 1, 2026Updated 8 months ago