Run Cobalt Strike BOFs in Brute Ratel C4!
☆91Apr 15, 2025Updated last year
Alternatives and similar repositories for cs2br-bof
Users that are interested in cs2br-bof are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Cobalt Strike + Brute Ratel C4 Beacon Object File (BOF) Conversion of the Mockingjay Process Injection Technique☆159Nov 7, 2023Updated 2 years ago
- ☆131Jun 28, 2023Updated 3 years ago
- Beacon Object File to locate and suspend the threads hosting the Event Log service☆29Jun 17, 2022Updated 4 years ago
- Cobalt Strike Beacon Object File (BOF) that uses RegConnectRegistryA + RegOpenKeyExA API to dump registry hives on remote computer☆18Mar 4, 2023Updated 3 years ago
- ☆150Nov 6, 2025Updated 11 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Cobalt Strike BOF to list Windows Pipes & return their Owners & DACL Permissions☆96Mar 8, 2023Updated 3 years ago
- COFF file (BOF) for managing Kerberos tickets.☆323Jul 2, 2023Updated 3 years ago
- A simple BOF that disables some logging with NtSetInformationProcess☆14Oct 13, 2023Updated 3 years ago
- .NET assembly loader with patchless AMSI and ETW bypass☆392Apr 19, 2023Updated 3 years ago
- Curated list of public Beacon Object Files(BOFs) build in as submodules for easy cloning☆140Jul 30, 2026Updated 3 months ago
- Library of BOFs to interact with SQL servers☆248Dec 3, 2025Updated 10 months ago
- C or BOF file to extract WebKit master key to decrypt user cookie☆211Apr 29, 2024Updated 2 years ago
- ☆121Oct 9, 2023Updated 3 years ago
- CobaltStrike BOF to spawn Beacons using DLL Application Directory Hijacking☆284Jun 8, 2023Updated 3 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Modified versions of the Cobalt Strike Process Injection Kit☆108Jan 24, 2024Updated 2 years ago
- ☆85Nov 1, 2023Updated 2 years ago
- A BOF that runs unmanaged PEs inline☆703Oct 23, 2024Updated 2 years ago
- Code snippets to add on top of cobalt strike sleepmask kit so that ekko can work in a CFG protected process☆47Mar 15, 2023Updated 3 years ago
- ☆126Sep 1, 2024Updated 2 years ago
- Beacon Object file set service sd☆11Mar 6, 2023Updated 3 years ago
- An alternative to the builtin clipboard feature in Cobalt Strike that adds the capability to enable/disable and dump the clipboard histor…☆117Apr 16, 2026Updated 6 months ago
- ☆180Mar 27, 2023Updated 3 years ago
- Cobalt Strike Beacon Object File to enable the webdav client service on x64 windows hosts☆27Sep 15, 2023Updated 3 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- badger-builder is an AI-assisted tool for generating dynamic Brute Ratel C4 profiles☆54Nov 21, 2024Updated last year
- Cobalt Strike Beacon Object File to to change the user's desktop wallpaper☆18Sep 15, 2023Updated 3 years ago
- Collection of Beacon Object Files (BOF) for Cobalt Strike☆714Sep 9, 2026Updated last month
- ☆21Jun 21, 2022Updated 4 years ago
- Beacon Object Files used for Cobalt Strike☆19Jul 18, 2023Updated 3 years ago
- A simple BOF that frees UDRLs☆124May 29, 2022Updated 4 years ago
- A work in progress BOF/COFF loader in Rust☆50Mar 22, 2023Updated 3 years ago
- Linker for Beacon Object Files☆193Oct 20, 2026Updated last week
- ☆138Dec 4, 2023Updated 2 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Code snippets to add on top of cobalt strike sleep mask to achieve patchless hook on AMSI and ETW☆87Mar 19, 2023Updated 3 years ago
- Dump protected process memory by using BYOVD to tamper with handle objects in the kernel.☆48Aug 5, 2025Updated last year
- PrivKit is a simple beacon object file that detects privilege escalation vulnerabilities caused by misconfigurations on Windows OS.☆630Jan 20, 2026Updated 9 months ago
- ☆113Feb 17, 2025Updated last year
- Parser and reconciliation tooling for large Active Directory environments.☆34Feb 18, 2025Updated last year
- A VSCode plugin to assist with BOF development.☆37Aug 14, 2024Updated 2 years ago
- Cobaltstrike Reflective Loader with Synthetic Stackframe☆193Jan 17, 2026Updated 9 months ago