Cobalt-Strike / sleepmask-vs
A simple Sleepmask BOF example
☆98Updated 7 months ago
Alternatives and similar repositories for sleepmask-vs:
Users that are interested in sleepmask-vs are comparing it to the libraries listed below
- Tool for working with Indirect System Calls in Cobalt Strike's Beacon Object Files (BOF) using SysWhispers3 for EDR evasion☆76Updated 2 weeks ago
- A Mythic agent for Windows written in C☆119Updated this week
- Improved version of EKKO by @5pider that Encrypts only Image Sections☆119Updated 2 years ago
- TypeLib persistence technique☆114Updated 6 months ago
- ApexLdr is a DLL Payload Loader written in C☆108Updated 9 months ago
- Robust Cobalt Strike shellcode loader with multiple advanced evasion features☆123Updated last week
- ☆47Updated last year
- AdaptixFramework Extension Kit☆60Updated this week
- ☆155Updated 2 years ago
- Execute shellcode via Bluetooth device authentication☆38Updated 2 months ago
- Terminate AV/EDR leveraging BYOVD attack☆83Updated last month
- CobaltStrike BOF to spawn Beacons using DLL Application Directory Hijacking☆226Updated last year
- A C# port from Invoke-GhostTask☆114Updated last year
- A Tool that aims to evade av with binary padding☆148Updated 9 months ago
- Library of BOFs to interact with SQL servers☆163Updated 2 weeks ago
- ☆80Updated last year
- An all-in-one Cobalt Strike BOF to patch, check and revert AMSI and ETW for x64 process. Both syscalls and dynamic resolve versions are a…☆133Updated 2 years ago
- Create Anti-Copy DRM Malware☆55Updated 8 months ago
- Port of Cobalt Strike's Process Inject Kit☆173Updated 4 months ago
- ☆125Updated 7 months ago
- ☆108Updated 3 months ago
- Generic PE loader for fast prototyping evasion techniques☆230Updated 9 months ago
- CSharp reimplementation of Venoma, another C++ Cobalt Strike beacon dropper with custom indirect syscalls execution☆42Updated last year
- Cobalt Strike + Brute Ratel C4 Beacon Object File (BOF) Conversion of the Mockingjay Process Injection Technique☆151Updated last year
- Weaponized CobaltStrike BOF for CVE-2023-36874 Windows Error Reporting LPE☆205Updated last year
- Alternative Shellcode Execution Via Callbacks in C# with P/Invoke☆76Updated 2 years ago
- Bypass LSA protection using the BYODLL technique☆157Updated 7 months ago
- Useful Cobalt Strike Beacon Object Files (BOFs) used during red teaming and penetration testing engagements.☆106Updated 2 years ago
- A 64-bit, position-independent code reverse TCP shell for Windows — built in Rust.☆63Updated 3 months ago
- Winsocket for Cobalt Strike.☆98Updated last year