Collection of BOFs for Linux
☆15Nov 2, 2026Updated this week
Alternatives and similar repositories for linux-bof
Users that are interested in linux-bof are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Agent Linux for AdaptixC2☆25Updated this week
- Object File (BOF) that demonstrates privilege escalation through a misconfigured AlwaysInstallElevated policy.☆13Sep 17, 2026Updated last month
- Cuban Eight is a red team tool that packages a Windows PE payload into a .wsl file spoofing a real Linux distro installer. Double-click t…☆33Oct 16, 2026Updated 2 weeks ago
- Reflective x64 Loader written in C/ASM☆15Dec 2, 2025Updated 11 months ago
- In-process Kerberos user enumeration and password attacks for AdaptixC2 — no process spawn, no file drop.☆17Sep 27, 2026Updated last month
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- OneDrive as a covert C2 transport for Cobalt Strike☆77Sep 19, 2026Updated last month
- ☆25Oct 27, 2026Updated last week
- A Bof to dump domain credentials via DRSGetNCChanges, Created for use with the Adaptix C2.☆15Dec 16, 2025Updated 10 months ago
- Serverless C2 transport plugin for AdaptixC2 v1.2 using AWS Lambda + DynamoDB as the relay infrastructure.☆33Updated this week
- ScorpionC2, a cli C2 written in C with focuses on better C2 architecture and easy use by operator. Built to Pwn☆21Oct 5, 2026Updated 3 weeks ago
- In-memory Encrypted Shellcode Execution Suite☆15Jan 26, 2026Updated 9 months ago
- Beacon Object file set service sd☆11Mar 6, 2023Updated 3 years ago
- open source implementation of the UDC2 spec used in Cobalt Strike☆61Jul 4, 2026Updated 4 months ago
- ClickMyPayload creates realistic browser verification pages that silently copy PowerShell or CMD commands to the clipboard, display decoy…☆28Sep 25, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Modules designed to be used with the Conquest framework.☆22Sep 3, 2026Updated 2 months ago
- Sleep Obfuscation via CreateThreadpoolTimer☆24Jul 27, 2026Updated 3 months ago
- Porting of NPPSPY by Grzegorz Tworek to 'man in the middle' the user logon process, and store the user's name and password in an unassumi…☆20Apr 24, 2023Updated 3 years ago
- Wrapping AdaptixC2 agent in a Crystal Palace Reflective DLL Loader, along with examples implementing different maldev techniques.☆13Mar 22, 2026Updated 7 months ago
- DeadManSwitch in rust with several triggers (remote local and network)☆28Nov 19, 2025Updated 11 months ago
- ARK C2 by Zypheron: Speed · Stealth · Control. AI-native C2 for authorized red teaming. Human-in-the-loop, modular, cross-platform.☆14Oct 23, 2026Updated last week
- Adaptix C2 extender to support Cobalt Strike Malleable C2 profiles☆56Jun 28, 2026Updated 4 months ago
- An open-source Linux GUI-based Remote Access Tool developed in C# with a Python payload, intended for legitimate penetration testing and …☆36Mar 9, 2026Updated 7 months ago
- This is a very simple BOF written for Cobalt Strike and other post exploitation frameworks that I reimplemented from one of my C++ tools.…☆15Dec 16, 2023Updated 2 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- A Windows process injection loader combining PPID spoofing, manual DLL mapping, module stomping, and direct NT syscall☆41Oct 17, 2026Updated 2 weeks ago
- RingKiller — BYOD PoC for vulnerable driver DCRCVDrv.sys. Abuses IOCTL 0x2205C0 to kill arbitrary processes from ring 0 via ZwTerminatePr…☆26Sep 12, 2026Updated last month
- AdaptixC2 Windows x64 agent focused on EDR evasion - position-independent beacon (C/NASM, no CRT, single .text section) with encrypted sl…☆27Oct 2, 2026Updated last month
- Decentralized, encrypted file drive over Nostr☆19Jul 6, 2026Updated 3 months ago
- collection of custom-designed HTML user interfaces for Command & Control (C2) systems.☆15Apr 8, 2025Updated last year
- A self-hosted, real-time collaborative workspace for offensive security assessments.☆42Feb 20, 2026Updated 8 months ago
- Custom Adaptix-compatible C2 agent - PIC beacon + Stardust UDRL + Go extender plugins☆153Updated this week
- Collection of Windows loaders☆22Mar 14, 2026Updated 7 months ago
- A C++/Asm template for PIC/EXE/DLL malware☆24Aug 12, 2025Updated last year
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Dumping all keys from a keytab file☆21Dec 1, 2025Updated 11 months ago
- Security research and exploit development: vulnerability analysis, exploit chain implementation, post-exploitation tradecraft, and defens…☆18Jun 8, 2026Updated 4 months ago
- You may not use this software to harm others, perform unauthorized surveillance, or breach privacy.☆12May 28, 2025Updated last year
- Templates for developing your own listeners and agents for AdaptixC2.☆64Sep 6, 2026Updated last month
- CVE-2026-65643 – cPanel Domain Parking RCE Toolkit (CVSS 8.7) | Red/Blue Team suite for unpatched cPanel & WHM 11.x (110,134,136,138). 2 …☆14Oct 8, 2026Updated 3 weeks ago
- Exploring the programming language Zig for writing shellcode targeting Windows operating systems.☆10Jan 10, 2024Updated 2 years ago
- Beacon Object File implementation of mimikatz leveraging the Process Hollowing technique☆42Jun 29, 2026Updated 4 months ago