Alternatives and similar repositories for CobaltStrike_OpenBeacon:

Users that are interested in CobaltStrike_OpenBeacon are comparing it to the libraries listed below

• Octoberfest7 / Secure_Stager
  An x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution
  ☆183Updated 3 months ago
• rweijnen / createdump
  Leverage WindowsApp createdump tool to obtain an lsass dump
  ☆147Updated 6 months ago
• rasta-mouse / process-inject-kit
  Port of Cobalt Strike's Process Inject Kit
  ☆171Updated 3 months ago
• Helixo32 / NimBlackout
  Kill AV/EDR leveraging BYOVD attack
  ☆344Updated last year
• cybersectroll / TrollAMSI
  ☆171Updated 4 months ago
• senzee1984 / EDRPrison
  Leverage a legitimate WFP callout driver to prevent EDR agents from sending telemetry
  ☆395Updated 7 months ago
• senzee1984 / InflativeLoading
  Dynamically convert an unmanaged EXE or DLL file to PIC shellcode by prepending a shellcode stub.
  ☆304Updated 11 months ago
• oh-az / NoArgs
  NoArgs is a tool designed to dynamically spoof and conceal process arguments while staying undetected. It achieves this by hooking into W…
  ☆151Updated 10 months ago
• deepinstinct / DCOMUploadExec
  DCOM Lateral movement POC abusing the IMsiServer interface - uploads and executes a payload remotely
  ☆348Updated 3 months ago
• florylsk / ExecIT
  Execute shellcode files with rundll32
  ☆193Updated last year
• praetorian-inc / goffloader
  A Go implementation of Cobalt Strike style BOF/COFF loaders.
  ☆204Updated last month
• maxDcb / C2TeamServer
  TeamServer and Client of Exploration Command and Control Framework
  ☆111Updated last week
• Offensive-Panda / LsassReflectDumping
  This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone…
  ☆192Updated 5 months ago
• flostyen / windows-persistence
  Windows Persistence IT-Security
  ☆90Updated 2 weeks ago
• senzee1984 / MutationGate
  Use hardware breakpoint to dynamically change SSN in run-time
  ☆245Updated 11 months ago
• rad9800 / BootExecuteEDR
  ☆350Updated 3 months ago
• florylsk / SignatureGate
  Weaponized HellsGate/SigFlip
  ☆198Updated last year
• Dump-GUY / EXE-or-DLL-or-ShellCode
  Just a simple silly PoC demonstrating executable "exe" file that can be used like exe, dll or shellcode...
  ☆155Updated 6 months ago
• WKL-Sec / GregsBestFriend
  GregsBestFriend process injection code created from the White Knight Labs Offensive Development course
  ☆184Updated last year
• 0xdea / blindsight
  Red teaming tool to dump LSASS memory, bypassing basic countermeasures.
  ☆206Updated 2 months ago
• 0xEr3bus / PoolPartyBof
  A beacon object file implementation of PoolParty Process Injection Technique.
  ☆374Updated last year
• rad9800 / FileRenameJunctionsEDRDisable
  ☆150Updated 3 months ago
• MalwareTech / EDRception
  A proof of concept for abusing exception handlers to hook and bypass user mode EDR hooks.
  ☆181Updated last year
• RedefiningReality / Cobalt-Strike
  Various resources to enhance Cobalt Strike's functionality and its ability to evade antivirus/EDR detection
  ☆283Updated 10 months ago
• TierZeroSecurity / edr_blocker
  Blocks EDR Telemetry by performing Person-in-the-Middle attack where network filtering is applied using iptables. The blocked destination…
  ☆141Updated 8 months ago
• 0xsp-SRD / MDE_Enum
  comprehensive .NET tool designed to extract and display detailed information about Windows Defender exclusions and Attack Surface Reducti…
  ☆195Updated 9 months ago
• TunnelGRE / Percino
  Evasive Golang Loader
  ☆129Updated 7 months ago
• rasta-mouse / OST-C2-Spec
  Open Source C&C Specification
  ☆241Updated 3 weeks ago
• itaymigdal / LOLSpoof
  An interactive shell to spoof some LOLBins command line
  ☆184Updated last year
• trustedsec / DitExplorer
  Tool for viewing NTDS.dit
  ☆150Updated last week