L4zyD0g / NimBeaconLinks
A Cobalt Strike beacon implemented in Nim.
☆26Updated 5 months ago
Alternatives and similar repositories for NimBeacon
Users that are interested in NimBeacon are comparing it to the libraries listed below
Sorting:
- A method to execute syscalls while bypassing EDR's function hooking and call stack analysis.☆24Updated 8 months ago
- shellcode生成框架☆89Updated last year
- beta☆119Updated last year
- A Blind EDR Project for Educational Purposes☆95Updated 11 months ago
- PE to shellcode☆257Updated last year
- 复现《EDR的梦魇：Storm-0978使用新型内核注入技术“Step Bear”》☆158Updated last year
- Binary Hollowing☆89Updated last year
- Resolve the issue of DLLmain function in white and black DLLs hanging when calling shellcode☆195Updated last year
- ShadeLoader is a shellcode loader designed to bypass most antivirus software. 壳代码, 杀毒软件, 绕过☆42Updated 7 months ago
- Cobalt Strike Beacon Object File for bypassing UAC via the CMSTPLUA COM interface.☆211Updated 3 years ago
- An implementation of an indirect system call☆131Updated 2 years ago
- more conveniently Visual-Studio-BOF-template☆74Updated 2 years ago
- 自定义函数堆栈，从而绕过ETW检测，这个是完整版。☆13Updated last year
- vehsyscall:a syscall project that may bypass EDR☆60Updated last year
- Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from mem…☆66Updated 2 months ago
- A C implementation for a stealth injection method☆36Updated last month
- Silently Install Chrome Extension For Persistence☆95Updated last year
- A Beacon Object File (BOF) template for Visual Studio☆255Updated last month
- Beta Linker☆20Updated last year
- Simulate per-process disconnection in red team environments☆113Updated 6 months ago
- Process injection alternative☆403Updated last year
- Shellcode obfuscation tool to avoid AV/EDR.☆130Updated 2 years ago
- The tool used to clone the digital signatures of legitimate programs☆47Updated 2 months ago
- ☆244Updated 2 years ago
- WPTaskScheduler RPC Persistence & CVE-2024-49039 via Task Scheduler☆135Updated 5 months ago
- Self Cleanup in post-ex job☆59Updated last year
- Yet another C++ Cobalt Strike beacon dropper with Compile-Time API hashing and custom indirect syscalls execution☆198Updated 7 months ago
- Amaterasu terminates, or inhibits, protected processes such as application control and AV/EDR solutions by leveraging the Sysinternals Pr…☆78Updated last year
- create schtasks bypass AV☆22Updated last year
- ☆16Updated 6 months ago