NVISOsecurity / cs2br-bofLinks
Run Cobalt Strike BOFs in Brute Ratel C4!
☆84Updated 7 months ago
Alternatives and similar repositories for cs2br-bof
Users that are interested in cs2br-bof are comparing it to the libraries listed below
Sorting:
- Lateral Movement via the .NET Profiler☆84Updated last year
- ☆109Updated 9 months ago
- Modified versions of the Cobalt Strike Process Injection Kit☆102Updated last year
- Click Once + App Domain☆64Updated last year
- ☆128Updated 2 years ago
- SharpExShell automates the DCOM lateral movment technique which abuses ActivateMicrosoftApp method of Excel application.☆75Updated last year
- A care package of useful bofs for red team engagments☆55Updated 11 months ago
- Sliver extension performing TCP redirection tasks without performing cross-process injection.☆68Updated 10 months ago
- Local SYSTEM auth trigger for relaying - X☆153Updated 4 months ago
- C# havoc implant☆101Updated 2 years ago
- Lockless BOF☆79Updated 7 months ago
- ☆122Updated 2 years ago
- A collection of (even more) alternative shellcode callback methods in CSharp☆78Updated last year
- Tool for working with Indirect System Calls in Cobalt Strike's Beacon Object Files (BOF) using SysWhispers3 for EDR evasion☆99Updated 4 months ago
- A BOF to enumerate system process, their protection levels, and more.☆123Updated last year
- ☆71Updated 3 years ago
- Alternative Shellcode Execution Via Callbacks in C# with P/Invoke☆85Updated 2 years ago
- Tool to bypass LSA Protection (aka Protected Process Light)☆61Updated 11 months ago
- ☆99Updated last year
- ☆126Updated last year
- Simple .NET loader for loading and executing Powershell payloads☆17Updated 4 years ago
- Attempting to Hook LSASS APIs to Retrieve Plaintext Credentials☆53Updated 6 months ago
- Beacon Object File (BOF) to obtain Entra tokens via authcode flow.☆105Updated 6 months ago
- Remote service-staging tool built on Impacket, designed for BOF-style lateral movement workflows that lets you upload custom service load…☆91Updated 2 weeks ago
- Simple BOF to read the protection level of a process☆119Updated 2 years ago
- ☆92Updated last year
- ☆136Updated 9 months ago
- Cobalt Strike UDRL for memory scanner evasion.☆52Updated last year
- This technique leverages PowerShell's .NET interop layer and COM automation to achieve stealthy command execution by abusing implicit typ…☆51Updated 6 months ago
- Bunch of BOF files☆37Updated 5 months ago