Ne0nd0g / go-clr
A PoC package for hosting the CLR and executing .NET from Go
☆71Updated 8 months ago
Alternatives and similar repositories for go-clr:
Users that are interested in go-clr are comparing it to the libraries listed below
- Go implementation of the Heaven's Gate technique☆97Updated 4 years ago
- 🔎🪲 Malleable C2 profiles parser and assembler written in golang☆65Updated 10 months ago
- Generic impersonation and privilege escalation with Golang. Like GenericPotato both named pipes and HTTP are supported.☆112Updated 3 years ago
- Golang implementation of @CCob's C# ThreadlessInject☆32Updated 10 months ago
- ☆140Updated last year
- Generator of https://github.com/TheWover/donut in pure Go. supports compression, AMSI/WLDP/ETW bypass, etc.☆52Updated last year
- A simple BOF that frees UDRLs☆117Updated 2 years ago
- Golang evasion tool, execute-assembly .Net file☆97Updated 2 years ago
- ☆53Updated last year
- A Cobalt Strike memory evasion loader for redteamers☆99Updated 2 years ago
- Script to use SysWhispers2 direct system calls from Cobalt Strike BOFs☆123Updated 2 years ago
- Cobalt Strike User Defined Reflective Loader (UDRL). Check branches for different functionality.☆140Updated 2 years ago
- Beacon Object File to delete token privileges and lower the integrity level to untrusted for a specified process☆41Updated 2 years ago
- A third-party Gopher Assassin for the Havoc Framework.☆44Updated last year
- Reflectively load PE☆102Updated 4 years ago
- Code snippets to add on top of cobalt strike sleep mask to achieve patchless hook on AMSI and ETW☆84Updated 2 years ago
- ☆79Updated last year
- AV/EDR evasion via direct system calls.☆107Updated last year
- In-memory sleep encryption and heap encryption for Go applications through a shellcode function.☆39Updated last year
- Titan: A generic user defined reflective DLL for Cobalt Strike☆74Updated 2 years ago
- Beacon Object File allowing creation of Beacons in different sessions.☆79Updated 2 years ago
- ELF Beacon Object File (BOF) Template☆48Updated 4 months ago
- Preventing 3rd Party DLLs from Injecting into your Malware☆25Updated 3 years ago
- CVE-2024-40711-exp☆39Updated 5 months ago
- Code snippets to add on top of cobalt strike sleepmask kit so that ekko can work in a CFG protected process☆43Updated 2 years ago
- Automated compiler obfuscation for nim☆138Updated 2 years ago
- Little program written in C# to bypass EDR hooks and dump the content of the lsass process☆61Updated 3 years ago
- Cobalt Strike BOF Files with Nim!☆84Updated 2 years ago
- A version of NetLoader, Execute Assemblies and Bypass ETW and AMSI using Hardware Breakpoints☆81Updated 2 months ago
- Library of BOFs to interact with SQL servers☆158Updated 3 months ago