BOF template with boflink and mutator kit support
☆51Jan 8, 2026Updated 5 months ago
Alternatives and similar repositories for bof_template
Users that are interested in bof_template are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Implementing Ghostly-Hollowing using tampered syscalls for remote PE injection☆74Dec 26, 2025Updated 5 months ago
- Cobalt Strike UDC2 implementation that provides an Slack C2 channel☆69Jan 5, 2026Updated 5 months ago
- ☆52Mar 30, 2026Updated 2 months ago
- open source port/reimplementation of the Cobalt Strike BOF Loader as is☆72Mar 8, 2026Updated 3 months ago
- random code snippets, useful for getting started☆123Nov 29, 2025Updated 6 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Leveraging AWS Lambda Function URLs for C2 Redirection☆50Aug 30, 2023Updated 2 years ago
- A Model Context Protocol (MCP) server for automating Ludus v1 and v2 cyber range environments through AI assistants. 190+ tools for range…☆80Mar 26, 2026Updated 2 months ago
- Helps defenders find their WSUS configurations in the wake of CVE-2025-59287☆46Oct 28, 2025Updated 7 months ago
- A BOF that's a BOF Loader and more☆208Apr 6, 2026Updated 2 months ago
- Caddy v2 module to filter requests based on C2 profiles☆46Apr 24, 2025Updated last year
- A practical client for ADWS in Golang.☆54Mar 3, 2026Updated 3 months ago
- Self-cleaning in-memory PICO loader for Crystal Palace. Automatically erases traces and operates entirely in memory for stealthy payload …☆54Nov 2, 2025Updated 7 months ago
- POC tool to abuse windows server failover clusters☆56Aug 7, 2025Updated 10 months ago
- A collection of random small Aggressor snippets that don't warrant their own repo☆26Mar 23, 2023Updated 3 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A Windows tool that converts LDIF files to BloodHound CE☆32Dec 20, 2025Updated 5 months ago
- ☆58Jan 15, 2024Updated 2 years ago
- ☆50Dec 5, 2025Updated 6 months ago
- A lightweight redirector for Google Cloud Run, enabling domain fronting via Google-owned infrastructure.☆142Nov 12, 2025Updated 6 months ago
- Aggressor scripts for Cobalt Strike☆61Dec 9, 2019Updated 6 years ago
- Serverless AITM Simulation Framework for Entra ID and M365☆237Dec 29, 2025Updated 5 months ago
- ☆65Mar 15, 2024Updated 2 years ago
- A lightweight test harness designed to speed up shellcode development by providing an execution environment with integrated crash diagnos…☆45Jan 15, 2026Updated 4 months ago
- A tool to convert windows registry export files into windows hive files that can be used to replace NTUSER.MAN☆138Jan 26, 2026Updated 4 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- A lightweight Windows Prefetch file parser to extract programs' execution history☆69Jan 12, 2026Updated 4 months ago
- all random stuff that dont warrant a seperate repo☆12Sep 2, 2022Updated 3 years ago
- BOF to run PE in Cobalt Strike Beacon without console creation☆198Nov 23, 2025Updated 6 months ago
- Just another EDR killer☆137Jan 21, 2026Updated 4 months ago
- Modified version of PEAS client for offensive operations☆16Mar 8, 2021Updated 5 years ago
- IP Rotation from different providers - Like FireProx but for GCP, Azure, Alibaba and CloudFlare☆286Dec 15, 2025Updated 5 months ago
- A command-line tool for reconnaissance and targeted write operations on Confluence and Jira instances.☆14Jan 15, 2025Updated last year
- Linker for Beacon Object Files☆186Mar 30, 2026Updated 2 months ago
- A Payload Analysis Framework☆121Oct 9, 2025Updated 8 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Golang PoC that sandboxes Defender (or other PPL) by setting its token integrity to Untrusted.☆14May 28, 2025Updated last year
- Indirect Syscall with TartarusGate Approach in Go☆138Jul 8, 2025Updated 11 months ago
- Advanced PoC & Research for CVE-2026-0828 (Safetica) and CVE-2025-7771 (ThrottleStop). Analysis of BYOVD (Bring Your Own Vulnerable Drive…☆41Feb 4, 2026Updated 4 months ago
- Adversary Emulation Framework☆130Jul 1, 2025Updated 11 months ago
- load arbitrary dlls, call any exported function, calls execute inside g0 as normal syscalls do from the traditional route, no syscall or …☆28May 4, 2026Updated last month
- ☆36Jul 1, 2025Updated 11 months ago
- A tracker DLL which enables 'NTAPI->Syscall' tracking whenever it is loaded. It calls 'NtSetInformationProcess' API call with a callback …☆14Oct 21, 2024Updated last year