Havoc Professional backend plugin to allow ingesting of events and logs to Ghostwriter
☆16Feb 25, 2026Updated 5 months ago
Alternatives and similar repositories for ghostwriter-sync
Users that are interested in ghostwriter-sync are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Async port/ping scanner BOF. Supports IP/port ranges, CIDR notation and hostnames.☆18Jul 23, 2026Updated last week
- ☆39May 4, 2026Updated 3 months ago
- Async PICO Hub is a work-in-progress framework to extend Cobalt Strike with custom event monitoring and in-process Asynchronous BOFs☆26Jun 4, 2026Updated 2 months ago
- A reimplementation of Cobalt Strike's Beacon Object File (BOF) Loader☆71Mar 6, 2026Updated 4 months ago
- Busybox-style Beacon Object Files for *nix post-exploitation. Reimplements common Unix utilities as BOFs for use in stripped environments…☆83Jul 5, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Kerberos manipulation library in pure Python☆17Jan 31, 2026Updated 6 months ago
- A Rust template for writing Beacon Object Files (BOFs)☆129Feb 11, 2026Updated 5 months ago
- VDM sig bypass and additional WinAPI stubs☆19Feb 16, 2026Updated 5 months ago
- Async BOF that monitors USB device connect/disconnect events, reports device information and performs actions on connected USB storage vo…☆57Jul 23, 2026Updated last week
- Hijacking the Windows network stack from the kernel :)☆46May 5, 2026Updated 3 months ago
- first public in-process reflective PE loader for .NET NativeAOT binaries. maps a NativeAOT executable into the current process and execut…☆28Mar 28, 2026Updated 4 months ago
- Coverage-guided fuzzer in Rust☆34Jun 2, 2026Updated 2 months ago
- Azure Blob Storage C2 Profile for Mythic☆30Jan 30, 2026Updated 6 months ago
- ☆72Apr 20, 2026Updated 3 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Tool that gathers a customizable set of ETW telemetry and generates user-defined detections☆56Jan 28, 2026Updated 6 months ago
- Atomic test units for BOF execution☆60Apr 26, 2026Updated 3 months ago
- Find jmp gadgets for call stack spoofing.☆85Oct 1, 2025Updated 10 months ago
- Object file loader implemented as a post-ex DLL for asynchronous BOF execution.☆29Jul 23, 2026Updated last week
- A Crystal Palace shared library to resolve & perform syscalls☆62Oct 29, 2025Updated 9 months ago
- A Beacon Object File (BOF) that talks directly to Windows authentication packages through the LSA untrusted/trusted client interface, wit…☆297Feb 21, 2026Updated 5 months ago
- ☆18Dec 11, 2025Updated 7 months ago
- One-header configurable C++20 COFF loader☆21Jul 21, 2025Updated last year
- Tyche is a Mythic HTTPX Profile Generator used to create Malleable C2 Profiles.☆47Mar 28, 2026Updated 4 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- ☆43Dec 4, 2025Updated 8 months ago
- Print the stack trace☆51Mar 8, 2026Updated 4 months ago
- A simple Sleepmask BOF example☆177Nov 24, 2025Updated 8 months ago
- Precision call-stack spoofing gadget hunter for x64 DLLs, powered by Iced disassembler☆19Jul 2, 2026Updated last month
- Windows Portable Device COM BOF☆18Mar 30, 2026Updated 4 months ago
- ☆86Feb 12, 2026Updated 5 months ago
- Querying And Deleting Shadow Copies Using The IOCTL_VOLSNAP_QUERY_NAMES_OF_SNAPSHOTS & IOCTL_VOLSNAP_DELETE_SNAPSHOT IOCTLs☆22Aug 7, 2025Updated 11 months ago
- A PICO for Crystal Palace that implements CLR hosting to execute a .NET assembly in memory.☆141Jan 28, 2026Updated 6 months ago
- ☆55Feb 12, 2026Updated 5 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- A PoC UDRL for Cobalt Strike built with Crystal Palace that combines Raphael Mudge's page streaming technique with a modular call gate (D…☆136Jan 21, 2026Updated 6 months ago
- ☆47Dec 28, 2025Updated 7 months ago
- A BOF designed to inspect processes memory and addresses☆40Apr 19, 2026Updated 3 months ago
- A tool to easily perform GitLab Device Code Phishing on red team engagements☆51Feb 9, 2026Updated 5 months ago
- Run CobaltStrike aggressorscript over TCP☆16Feb 9, 2026Updated 5 months ago
- Research notes on Windows Component Object Model (COM) attack surface for offensive security and vulnerability research. Covers COM hijac…☆147Jul 20, 2026Updated 2 weeks ago
- A POC tool for exploring dev-tunnels☆66May 5, 2026Updated 3 months ago