☆16Oct 13, 2026Updated last week
Alternatives and similar repositories for beacon-interpreter
Users that are interested in beacon-interpreter are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- External C2 is a specification to allow third-party programs to act as a communication layer for Cobalt Strike’s Beacon payload.☆23Jul 17, 2025Updated last year
- Cobalt Strike BOF to obtain location data☆30Jul 4, 2026Updated 3 months ago
- A PoC UDRL for Cobalt Strike built with Crystal Palace that combines Raphael Mudge's page streaming technique with a modular call gate (D…☆141Jan 21, 2026Updated 9 months ago
- Collection of Beacon Object Files (BOFs) that I wrote.☆43Aug 23, 2026Updated 2 months ago
- Async PICO Hub is a work-in-progress framework to extend Cobalt Strike with custom event monitoring and in-process Asynchronous BOFs☆27Jun 4, 2026Updated 4 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆43Sep 9, 2026Updated last month
- A hacky way of getting cross-arch/platform support in Cobalt Strike☆38Aug 31, 2025Updated last year
- ☆15Sep 26, 2023Updated 3 years ago
- AWS S3 User-Defined C2☆24Oct 6, 2026Updated 2 weeks ago
- SilentChrome-BOF installs Chromium extension, native messaging, and Isolated Web App profile artifacts☆52Aug 10, 2026Updated 2 months ago
- Busybox-style Beacon Object Files for *nix post-exploitation. Reimplements common Unix utilities as BOFs for use in stripped environments…☆83Aug 22, 2026Updated 2 months ago
- A template for Rust based BOF-PEs☆25Apr 5, 2026Updated 6 months ago
- Active Directory time discovery protocols for red teams. Stealthy extraction via Kerberos, SMB, NTLM, and CLDAP.☆78Oct 18, 2026Updated last week
- A reflective DLL development template for the Rust programming language☆122Nov 4, 2025Updated 11 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A small collection of Crystal Palace PIC loaders designed for use with Cobalt Strike☆246Apr 11, 2026Updated 6 months ago
- UDC2 implementation that provides an ICMP C2 channel☆132Nov 24, 2025Updated 11 months ago
- PrimitiveInjection by using Read, Write and Allocation Primitives.☆55Jun 21, 2025Updated last year
- Parses logs created by Cobalt Strike, Brute Ratel, OC2 and creates an SQLite DB which can be used to create custom reports.☆32Jul 4, 2026Updated 3 months ago
- open source implementation of the UDC2 spec used in Cobalt Strike☆60Jul 4, 2026Updated 3 months ago
- Modified-Thycotic-Secret-Stealer for use with DPAPI and offline Decryption☆19Aug 5, 2022Updated 4 years ago
- Refreshing Device Bound Session Credentials (DBSC) with Chromiums session store and the Windows CNG API☆30Jul 25, 2026Updated 3 months ago
- crystal palace + draugr function hook definition generator☆17Jan 27, 2026Updated 8 months ago
- User-Defined C2 BOF Template☆33Nov 24, 2025Updated 11 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Havoc 3rd party agent. Designed to be evasive. Fully PIC shellcode agent.☆17Dec 29, 2022Updated 3 years ago
- async beacon object file for notification on process creation☆18Mar 24, 2026Updated 7 months ago
- Bof of RegPwn by MDSec☆130Mar 15, 2026Updated 7 months ago
- A Bof to dump domain credentials via DRSGetNCChanges, Created for use with the Adaptix C2.☆15Dec 16, 2025Updated 10 months ago
- OneDrive as a covert C2 transport for Cobalt Strike☆76Sep 19, 2026Updated last month
- Tool to transplant a valid code signature from one Portable Executable (PE) binary to another.☆17Apr 24, 2020Updated 6 years ago
- Crystal Palace library for proxying Nt API calls via the Threadpool. Updated for call gadgets.☆23Nov 11, 2025Updated 11 months ago
- Stack spoofing Detection for CET processes by comparing shadow and user stacks.☆41May 22, 2026Updated 5 months ago
- Attempting to Hook LSASS APIs to Retrieve Plaintext Credentials☆56May 12, 2025Updated last year
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A Raspberry Pi-based Ethernet implant that bypasses 802.1X and allows the same IP address to be used in parallel. presented on x33fcon 20…☆18Aug 6, 2026Updated 2 months ago
- BOF to run PE in Cobalt Strike Beacon without console creation☆198Nov 23, 2025Updated 11 months ago
- BAADTokenBroker is a post-exploitation tool designed to interact with Microsoft Entra ID device-bound keys.☆82Apr 11, 2026Updated 6 months ago
- Passive backdoor implant that sniffs for a covert magic-packet trigger and runs tasks written in a custom 23-opcode bytecode command lang…☆57Aug 26, 2026Updated last month
- Scrape GrayHat Warefare for leaked code signing certificates. Outputs certificate hashes to crack with JtR☆12Nov 25, 2023Updated 2 years ago
- A Beacon Object File (BOF) for Cobalt Strike and Mythic C2 that implements COM hijacking for persistence on Windows systems.☆37Feb 17, 2026Updated 8 months ago
- Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable…☆34Mar 28, 2026Updated 6 months ago