EricEsquivel / CobaltStrike-Linux-BeaconView external linksLinks
Proof of Concept (PoC) implant for creating custom Cobalt Strike Beacons
☆94Updated this week
Alternatives and similar repositories for CobaltStrike-Linux-Beacon
Users that are interested in CobaltStrike-Linux-Beacon are comparing it to the libraries listed below
Sorting:
- Cobalt Strike BOF☆42Dec 10, 2025Updated 2 months ago
- A Rust template for writing Beacon Object Files (BOFs)☆87Updated this week
- ☆61Dec 19, 2024Updated last year
- Python3 implementation of ADRecon with support for NTLM and Kerberos authentication. Generates individual CSV files and a single XSLX rep…☆24Updated this week
- Fast covert timing channel communication for inter-process and inter-processor communication on Windows systems.☆67Nov 15, 2025Updated 2 months ago
- The most extensive collection of BOFs (Beacon Object Files) tailored for Red Teams using C++23☆23Jun 19, 2025Updated 7 months ago
- ☆53Sep 23, 2025Updated 4 months ago
- Cobalt Strike UDC2 implementation that provides an Slack C2 channel☆60Jan 5, 2026Updated last month
- A synergized Visual Studio and Rust development environment☆19Jan 25, 2025Updated last year
- ☆106Aug 21, 2024Updated last year
- Post-Ex BOF tooling for Hannibal☆24Nov 20, 2024Updated last year
- Remote BOF Runner is a Havoc extension framework for remote execution of Beacon Object Files (BOFs) using a PIC loader made with Crystal …☆88Jan 2, 2026Updated last month
- ☆100Oct 7, 2023Updated 2 years ago
- Linker for Beacon Object Files☆149Updated this week
- Dump protected process memory by using BYOVD to tamper with handle objects in the kernel.☆38Aug 5, 2025Updated 6 months ago
- A stealthy, assembly-based tool for secure function address resolution, offering a robust alternative to GetProcAddress.☆72Mar 6, 2024Updated last year
- ☆55May 31, 2025Updated 8 months ago
- User-mode implementation of HTTP.SYS. Implements HTTP 1.1 of the "HTTP Server API 2.0" for web servers☆44Feb 17, 2025Updated 11 months ago
- Beacon Object File (BOF) for identifying dependent child services of a given parent.☆18Jun 20, 2025Updated 7 months ago
- A rust proof of concept to demonstrate registry overwriting via RegRestoreKey using the Offline Registry Library☆24Nov 13, 2025Updated 3 months ago
- Safe Harbor is a BOF that streamlines process reconnaissance for red team operations by identifying trusted, low-noise targets to maintai…☆75Oct 27, 2025Updated 3 months ago
- A small experiment on assigning a processes threads a specific CPU and then blocking it with a high priority thread☆30Sep 24, 2025Updated 4 months ago
- Cobaltstrike UDRL with memory evasion☆15May 16, 2024Updated last year
- Attack Active Directory Trusts with a single tool☆14Jan 15, 2025Updated last year
- Enable EFS service as low priv user (PE & BOF)☆21Jul 6, 2025Updated 7 months ago
- Beacon Debugger☆55Oct 28, 2024Updated last year
- Beacon Object File (BOF) port of DumpGuard for extracting NTLMv1 hashes from sessions on modern Windows systems.☆207Jan 6, 2026Updated last month
- ☆36Nov 8, 2024Updated last year
- Early Bird Cryo Injections – APC-based DLL & Shellcode Injection via Pre-Frozen Job Objects☆135Apr 6, 2025Updated 10 months ago
- Rust implementation, creating a scheduled task programmatically with user logon trigger.☆47Jun 10, 2025Updated 8 months ago
- A Beacon Object File (BOF) that performs the complete ESC1 attack chain in a single execution: certificate request with arbitrary SAN (+S…☆113Dec 21, 2025Updated last month
- Stage 0☆169Dec 18, 2024Updated last year
- A tracker DLL which enables 'NTAPI->Syscall' tracking whenever it is loaded. It calls 'NtSetInformationProcess' API call with a callback …☆14Oct 21, 2024Updated last year
- ☆17Jan 9, 2025Updated last year
- ☆31Jan 22, 2026Updated 3 weeks ago
- Sleep Obfuscation in Rust☆277Dec 1, 2025Updated 2 months ago
- macOS dylib stager☆36Jan 22, 2025Updated last year
- Internal Monologue BOF☆79Dec 28, 2024Updated last year
- ☆137Nov 17, 2025Updated 2 months ago