Alternatives and similar repositories for Defender-Exclusions-Creator-BOF

Users that are interested in Defender-Exclusions-Creator-BOF are comparing it to the libraries listed below

• REDMED-X / InjectKit
  Modified versions of the Cobalt Strike Process Injection Kit
  ☆94Updated last year
• parzel / GoSleepyCrypt
  In-memory sleep encryption and heap encryption for Go applications through a shellcode function.
  ☆39Updated last year
• werdhaihai / SharpAltShellCodeExec
  Alternative Shellcode Execution Via Callbacks in C# with P/Invoke
  ☆77Updated 2 years ago
• trustedsec / PPLFaultDumpBOF
  ☆142Updated 2 years ago
• SlimeOnSecurity / PrintSpoofer-BOF
  ☆44Updated last month
• ScriptIdiot / sleepmask_PatchlessHook
  Code snippets to add on top of cobalt strike sleep mask to achieve patchless hook on AMSI and ETW
  ☆84Updated 2 years ago
• Tw1sm / SQL-BOF
  Library of BOFs to interact with SQL servers
  ☆174Updated last month
• xforcered / BOFMask
  ☆125Updated last year
• ewby / Mockingjay_BOF
  Cobalt Strike + Brute Ratel C4 Beacon Object File (BOF) Conversion of the Mockingjay Process Injection Technique
  ☆156Updated last year
• SaadAhla / D1rkSleep
  Improved version of EKKO by @5pider that Encrypts only Image Sections
  ☆119Updated 2 years ago
• Leo4j / PPLKiller
  Tool to bypass LSA Protection (aka Protected Process Light)
  ☆53Updated 5 months ago
• Mr-Un1k0d3r / Elevate-System-Trusted-BOF
  ☆158Updated 2 years ago
• S4ntiagoP / freeBokuLoader
  A simple BOF that frees UDRLs
  ☆120Updated 3 years ago
• deh00ni / NtDumpBOF
  ☆96Updated 9 months ago
• realstatus / CVE-2024-40711-Exp
  CVE-2024-40711-exp
  ☆42Updated 7 months ago
• c3r3br4t3 / ShadowRDP
  ☆71Updated last year
• sudonoodle / BOF-entra-authcode-flow
  Beacon Object File (BOF) to obtain Entra tokens via authcode flow.
  ☆91Updated 3 weeks ago
• NtDallas / OdinLdr
  Cobaltstrike Reflective Loader with Synthetic Stackframe
  ☆123Updated 4 months ago
• reveng007 / AMSI-patches-learned-till-now
  I have documented all of the AMSI patches that I learned till now
  ☆72Updated 2 months ago
• tdeerenberg / InlineWhispers3
  Tool for working with Indirect System Calls in Cobalt Strike's Beacon Object Files (BOF) using SysWhispers3 for EDR evasion
  ☆82Updated last month
• racoten / BetterNetLoader
  A version of NetLoader, Execute Assemblies and Bypass ETW and AMSI using Hardware Breakpoints
  ☆87Updated 4 months ago
• LuemmelSec / ntlmrelayx.py_to_exe
  ☆87Updated 2 years ago
• FalconForceTeam / bof-winrm-client
  ☆111Updated 4 months ago
• netero1010 / TrustedPath-UACBypass-BOF
  Cobalt Strike beacon object file implementation for trusted path UAC bypass. The target executable will be called without involving "cmd.…
  ☆136Updated 3 years ago
• Mav3rick33 / ZenLdr
  Basic implementation of Cobalt Strikes - User Defined Reflective Loader feature
  ☆100Updated 2 years ago
• waawaa / AMSI_Rubeus_bypass
  ☆70Updated 2 years ago
• MaorSabag / interactive-execute-shellcode
  A simple PoC of injection shellcode into a remote process and get the output using namepipe
  ☆42Updated last year
• itaymigdal / PartyLoader
  Threadless shellcode injection tool
  ☆64Updated 10 months ago
• dmcxblue / SharpGhostTask
  A C# port from Invoke-GhostTask
  ☆117Updated last year
• passthehashbrowns / BOFMask
  ☆122Updated last year