ElJaviLuki / CobaltStrike_OpenBeaconLinks
Fully functional, from-scratch alternative to the Cobalt Strike Beacon (red teaming tool), offering transparency and flexibility for security professionals and enthusiasts.
☆231Updated last year
Alternatives and similar repositories for CobaltStrike_OpenBeacon
Users that are interested in CobaltStrike_OpenBeacon are comparing it to the libraries listed below
Sorting:
- Various resources to enhance Cobalt Strike's functionality and its ability to evade antivirus/EDR detection☆292Updated last year
- Invoke-ArgFuscator is an open-source, cross-platform PowerShell module that helps generate obfuscated command-lines for common system-nat…☆172Updated last month
- Kill AV/EDR leveraging BYOVD attack☆359Updated last year
- Open Source C&C Specification☆253Updated 3 months ago
- Leverage WindowsApp createdump tool to obtain an lsass dump☆149Updated 8 months ago
- Weaponized HellsGate/SigFlip☆199Updated last year
- Dynamically convert an unmanaged EXE or DLL file to PIC shellcode by prepending a shellcode stub.☆314Updated last year
- Red teaming tool to dump LSASS memory, bypassing basic countermeasures.☆228Updated 5 months ago
- Port of Cobalt Strike's Process Inject Kit☆178Updated 6 months ago
- An x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution☆187Updated 6 months ago
- This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone…☆200Updated 7 months ago
- Ghosting-AMSI☆180Updated last month
- Cobalt Strike BOF for evasive .NET assembly execution☆249Updated 2 months ago
- A list of python tools to help create an OPSEC-safe Cobalt Strike profile.☆440Updated 2 weeks ago
- GregsBestFriend process injection code created from the White Knight Labs Offensive Development course☆190Updated last year
- NoArgs is a tool designed to dynamically spoof and conceal process arguments while staying undetected. It achieves this by hooking into W…☆152Updated last year
- 🔥📜 Forbidden collection of Red Team sorcery 📜🔥☆114Updated this week
- Leak of any user's NetNTLM hash. Fixed in KB5040434☆254Updated 9 months ago
- Terminate AV/EDR Processes using kernel driver☆344Updated last year
- ☆176Updated this week
- Havoc C2 profile generator☆89Updated 7 months ago
- A tool employs direct registry manipulation to create scheduled tasks without triggering the usual event logs.☆558Updated 5 months ago
- Robust Cobalt Strike shellcode loader with multiple advanced evasion features☆162Updated last month
- Leverage a legitimate WFP callout driver to prevent EDR agents from sending telemetry☆414Updated 10 months ago
- ☆166Updated 10 months ago
- Find potential DLL Sideloads on your windows computer☆206Updated 4 months ago
- Evasive Golang Loader☆131Updated 10 months ago
- Extracting NetNTLM without touching lsass.exe☆235Updated last year
- 「💀」Proof of concept on BYOVD attack☆159Updated 5 months ago
- BOF and Python3 implementation of technique to unbind 445/tcp on Windows via SCM interactions☆302Updated 6 months ago