Ne0nd0g / go-clr
A PoC package for hosting the CLR and executing .NET from Go
☆68Updated 6 months ago
Alternatives and similar repositories for go-clr:
Users that are interested in go-clr are comparing it to the libraries listed below
- Go implementation of the Heaven's Gate technique☆96Updated 3 years ago
- 🔎🪲 Malleable C2 profiles parser and assembler written in golang☆61Updated 8 months ago
- Generic impersonation and privilege escalation with Golang. Like GenericPotato both named pipes and HTTP are supported.☆112Updated 3 years ago
- ☆138Updated last year
- Generator of https://github.com/TheWover/donut in pure Go. supports compression, AMSI/WLDP/ETW bypass, etc.☆41Updated last year
- Script to use SysWhispers2 direct system calls from Cobalt Strike BOFs☆120Updated 2 years ago
- Golang evasion tool, execute-assembly .Net file☆94Updated 2 years ago
- Golang implementation of @CCob's C# ThreadlessInject☆32Updated 8 months ago
- A simple BOF that frees UDRLs☆115Updated 2 years ago
- Reflectively load PE☆102Updated 4 years ago
- A third-party Gopher Assassin for the Havoc Framework.☆45Updated last year
- Beacon Object File allowing creation of Beacons in different sessions.☆78Updated 2 years ago
- AV/EDR evasion via direct system calls.☆107Updated last year
- Basic implementation of Cobalt Strikes - User Defined Reflective Loader feature☆98Updated last year
- ☆79Updated last year
- Cobalt Strike User Defined Reflective Loader (UDRL). Check branches for different functionality.☆135Updated 2 years ago
- A Cobalt Strike memory evasion loader for redteamers☆97Updated last year
- Section Mapping Process Injection (secinject): Cobalt Strike BOF☆91Updated 3 years ago
- CVE-2024-40711-exp☆38Updated 3 months ago
- Golng version of SharpDump that can be used to extract LSASS or any other proces. Provides token elevation prior to creating dump of high…☆21Updated 4 years ago
- ☆141Updated 2 years ago
- Library of BOFs to interact with SQL servers☆155Updated last month
- Little program written in C# to bypass EDR hooks and dump the content of the lsass process☆61Updated 3 years ago
- In-memory sleep encryption and heap encryption for Go applications through a shellcode function.☆39Updated last year
- BOF implementation of the research by @jonasLyk and the drafted PoC from @LloydLabs☆176Updated 3 years ago
- Preventing 3rd Party DLLs from Injecting into your Malware☆25Updated 3 years ago
- Titan: A generic user defined reflective DLL for Cobalt Strike☆75Updated 2 years ago
- A version of NetLoader, Execute Assemblies and Bypass ETW and AMSI using Hardware Breakpoints☆65Updated 2 weeks ago
- Exploring in-memory execution of .NET☆136Updated 2 years ago
- It stinks☆101Updated 2 years ago