bof for interacting with WSL
☆14Jan 8, 2026Updated 9 months ago
Alternatives and similar repositories for bof-wsl
Users that are interested in bof-wsl are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Open Source implementation of PsPipeJack☆27May 27, 2026Updated 4 months ago
- List web account manager (WAM) accounts added to the current profile☆26Dec 11, 2025Updated 10 months ago
- POC tool to abuse windows server failover clusters☆58Aug 7, 2025Updated last year
- Post-ex tool to interact with chromium browser when CDP is enabled☆47May 15, 2026Updated 5 months ago
- Kerberos manipulation library in pure Python☆27Aug 24, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ANIMO Azure Network Intel & Mission Ops a C2 based on Azure/Entra assessments☆93Sep 16, 2026Updated last month
- Async BOF for NTLMv2 Hash Snooping from ETW☆13Apr 2, 2026Updated 6 months ago
- BOF implementation of Adopt. Spawns a process from a process. Can sometimes be used to run a session > 0 process from session 0.☆16Jul 22, 2022Updated 4 years ago
- A Binary Ninja plugin that uses bruteforced XFG hashes to recover precise function prototypes☆16Feb 7, 2024Updated 2 years ago
- ☆12Feb 26, 2025Updated last year
- SOCKS-focused NTLM relay with persistent session packages and a long-lived SessionBank that owns authenticated TCP connections.☆41Aug 3, 2026Updated 2 months ago
- Azure Blob Storage C2 Profile for Mythic☆30Sep 28, 2026Updated 3 weeks ago
- ☆59Jun 10, 2026Updated 4 months ago
- Prime a process for injection when S1 is present☆13Feb 8, 2025Updated last year
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Recover NT hashes from NetNTLMv1 responses using local WebGPU computation and local/remote table lookup☆136Oct 7, 2026Updated last week
- Dockerized template to build CS BOFs using clang-cl☆26Jan 29, 2026Updated 8 months ago
- Havoc Professional backend plugin to allow ingesting of events and logs to Ghostwriter☆16Feb 25, 2026Updated 7 months ago
- Research on a new PoC for a Windows Sandbox .wsb HostFolder UNC path primitive that causes the host to authenticate over SMB and leak Net…☆32Jun 21, 2026Updated 4 months ago
- ☆25Sep 12, 2026Updated last month
- Ditto is a Windows Mythic Agent for Chroimium Browsers that utilizes Chromium extensions as its base agent with optional sidecar attachme…☆32Updated this week
- first public in-process reflective PE loader for .NET NativeAOT binaries. maps a NativeAOT executable into the current process and execut…☆28Mar 28, 2026Updated 6 months ago
- CVE-2026-45504 Microsoft Exchange File Read☆64Jun 24, 2026Updated 3 months ago
- A service container for interacting with SRA's VECTR☆18Apr 9, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Claude Code skill for systematically reducing VirusTotal/EDR detection rates on compiled Go binaries via PE structural analysis and disci…☆20Jun 24, 2026Updated 3 months ago
- Browse and diff ETW provider snapshots across Windows builds. Backed by ETWInspector.☆39Sep 9, 2026Updated last month
- ☆39Sep 25, 2026Updated 3 weeks ago
- ☆21Mar 3, 2026Updated 7 months ago
- Shellcode capable of bypassing EAF / IAF mitigations☆29Apr 11, 2023Updated 3 years ago
- ☆55Sep 18, 2026Updated last month
- wtftp.py is a tool to attack Microsoft Deployment Toolkit (MDT) and Windows Deployment Services (WDS).☆44Jan 22, 2026Updated 8 months ago
- A BOF designed to inspect processes memory and addresses☆42Apr 19, 2026Updated 6 months ago
- CVE-2025-59501 POC code☆25Nov 20, 2025Updated 11 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A tracker DLL which enables 'NTAPI->Syscall' tracking whenever it is loaded. It calls 'NtSetInformationProcess' API call with a callback …☆14Oct 21, 2024Updated 2 years ago
- Self delete DLL (2)☆14Feb 15, 2024Updated 2 years ago
- API hashing written in C to load APIs indirectly using CRC32 hashing☆15Jul 27, 2020Updated 6 years ago
- ☆10Apr 26, 2024Updated 2 years ago
- ☆25Apr 28, 2024Updated 2 years ago
- A simple speed reading application that supports .txt, .pdf, and image text extraction☆17Jun 17, 2026Updated 4 months ago
- Pass-the-Passkey Family of Attacks☆234Sep 14, 2026Updated last month