Alternatives and similar repositories for ScreenshotBOF:

Users that are interested in ScreenshotBOF are comparing it to the libraries listed below

• nickvourd / COM-Hunter
  COM Hijacking VOODOO
  ☆262Updated this week
• CodeXTF2 / Burp2Malleable
  Quick python utility I wrote to turn HTTP requests from burp suite into Cobalt Strike Malleable C2 profiles
  ☆376Updated last year
• Cracked5pider / KaynStrike
  UDRL for CS
  ☆419Updated last year
• zcgonvh / DCOMPotato
  Some Service DCOM Object and SeImpersonatePrivilege abuse.
  ☆354Updated 2 years ago
• crisprss / RasmanPotato
  Abuse Impersonate Privilege from Service to SYSTEM like other potatoes do
  ☆369Updated last year
• Octoberfest7 / MemFiles
  A CobaltStrike toolkit to write files produced by Beacon to memory instead of disk
  ☆446Updated 6 months ago
• m3rcer / Chisel-Strike
  A .NET XOR encrypted cobalt strike aggressor implementation for chisel to utilize faster proxy and advanced socks5 capabilities.
  ☆445Updated 10 months ago
• mgeeky / ElusiveMice
  Cobalt Strike User-Defined Reflective Loader with AV/EDR Evasion in mind
  ☆430Updated last year
• Hagrid29 / DuplicateDump
  Dumping LSASS with a duplicated handle from custom LSA plugin
  ☆201Updated 2 years ago
• wh0amitz / BypassCredGuard
  Credential Guard Bypass Via Patching Wdigest Memory
  ☆314Updated last year
• netero1010 / RDPHijack-BOF
  Cobalt Strike Beacon Object File (BOF) that uses WinStationConnect API to perform local/remote RDP session hijacking.
  ☆299Updated 2 years ago
• M01N-Team / HeaderLessPE
  ☆238Updated last year
• WKL-Sec / Malleable-CS-Profiles
  A list of python tools to help create an OPSEC-safe Cobalt Strike profile.
  ☆394Updated 11 months ago
• mertdas / SharpTerminator
  Terminate AV/EDR Processes using kernel driver
  ☆340Updated last year
• securifybv / Visual-Studio-BOF-template
  A Visual Studio template used to create Cobalt Strike BOFs
  ☆289Updated 3 years ago
• YOLOP0wn / POSTDump
  ☆316Updated last year
• N4kedTurtle / PersistBOF
  A BOF to automate common persistence tasks for red teamers
  ☆271Updated last year
• improsec / SharpEventPersist
  Persistence by writing/reading shellcode from Event Log
  ☆370Updated 2 years ago
• f1zm0 / hades
  Go shellcode loader that combines multiple evasion techniques
  ☆361Updated last year
• kyxiaxiang / Beacon_Source
  not a reverse-engineered version of the Cobalt Strike Beacon
  ☆343Updated 9 months ago
• mdsecactivebreach / DragonCastle
  A PoC that combines AutodialDLL lateral movement technique and SSP to scrape NTLM hashes from LSASS process.
  ☆294Updated 2 years ago
• senzee1984 / InflativeLoading
  Dynamically convert an unmanaged EXE or DLL file to PIC shellcode by prepending a shellcode stub.
  ☆271Updated 9 months ago
• GeorgePatsias / ScareCrow-CobaltStrike
  Cobalt Strike script for ScareCrow payloads intergration (EDR/AV evasion)
  ☆458Updated 2 years ago
• adamsvoboda / nim-loader
  WIP shellcode loader in nim with EDR evasion techniques
  ☆209Updated 2 years ago
• netero1010 / ServiceMove-BOF
  New lateral movement technique by abusing Windows Perception Simulation Service to achieve DLL hijacking code execution.
  ☆284Updated 2 years ago
• SaadAhla / UnhookingPatch
  Bypass EDR Hooks by patching NT API stub, and resolving SSNs and syscall instructions at runtime
  ☆301Updated last year
• embee-research / Randomise-api-hashes-cobalt-strike
  Bypass Detection By Randomising ROR13 API Hashes
  ☆134Updated 2 years ago
• 0xEr3bus / PoolPartyBof
  A beacon object file implementation of PoolParty Process Injection Technique.
  ☆366Updated last year
• MaorSabag / TrueSightKiller
  CPP AV/EDR Killer
  ☆371Updated last year
• Cerbersec / KillDefenderBOF
  Beacon Object File PoC implementation of KillDefender
  ☆218Updated 2 years ago