Alternatives and similar repositories for Beacon.dll

Users that are interested in Beacon.dll are comparing it to the libraries listed below

• WBGlIl / Beacon_re

  View on GitHub
  ☆89Jun 28, 2022Updated 3 years ago
• mai1zhi2 / SharpBeacon

  View on GitHub
  CobaltStrike Beacon written in .Net 4 用.net重写了stager及Beacon，其中包括正常上线、文件管理、进程管理、令牌管理、结合SysCall进行注入、原生端口转发、关ETW等一系列功能
  ☆731Sep 1, 2021Updated 4 years ago
• NoOne-hub / bypass-BeaconEye

  View on GitHub
  bypass BeaconEye
  ☆89Sep 9, 2021Updated 4 years ago
• rsmudge / unhook-bof

  View on GitHub
  Remove API hooks from a Beacon process.
  ☆283Sep 18, 2021Updated 4 years ago
• b0bac / GetMail

  View on GitHub
  利用NTLM Hash读取Exchange邮件
  ☆441Jan 7, 2025Updated last year
• Cobalt-Strike / beacon_health_check

  View on GitHub
  This aggressor script uses a beacon's note field to indicate the health status of a beacon.
  ☆141Sep 29, 2021Updated 4 years ago
• waldo-irc / LockdExeDemo

  View on GitHub
  A demo of the relevant blog post: https://www.arashparsa.com/hook-heaps-and-live-free/
  ☆194Sep 9, 2021Updated 4 years ago
• JDArmy / RPCSCAN

  View on GitHub
  RPC远程主机信息匿名扫描工具
  ☆317Sep 30, 2022Updated 3 years ago
• zcgonvh / TaskSchedulerMisc

  View on GitHub
  Misc TaskScheduler Plays
  ☆238Sep 27, 2022Updated 3 years ago
• 360-Linton-Lab / Telemetry

  View on GitHub
  WINDOWS TELEMETRY权限维持
  ☆258Jul 2, 2020Updated 5 years ago
• outflanknl / WdToggle

  View on GitHub
  A Beacon Object File (BOF) for Cobalt Strike which uses direct system calls to enable WDigest credential caching.
  ☆220May 3, 2023Updated 2 years ago
• knightswd / ProcessGhosting

  View on GitHub
  ☆74Jul 23, 2021Updated 4 years ago
• WBGlIl / go-ReflectiveDLL

  View on GitHub
  ReflectiveDLL
  ☆156Mar 16, 2020Updated 5 years ago
• uknowsec / CreateService

  View on GitHub
  创建服务持久化
  ☆108Apr 26, 2021Updated 4 years ago
• boku7 / injectEtwBypass

  View on GitHub
  CobaltStrike BOF - Inject ETW Bypass into Remote Process via Syscalls (HellsGate|HalosGate)
  ☆301Sep 28, 2021Updated 4 years ago
• ChaitanyaHaritash / Callback_Shellcode_Injection

  View on GitHub
  POCs for Shellcode Injection via Callbacks
  ☆411Feb 23, 2021Updated 4 years ago
• 1ight-2020 / GoRottenTomato

  View on GitHub
  Go实现部分Rubeus功能，可执行asktgt, asktgs, s4u, describe ticket, renew ticket, asreproast等
  ☆142May 5, 2022Updated 3 years ago
• mai1zhi2 / SysWhispers2_x86

  View on GitHub
  X86 version of syswhispers2 / x86 direct system call
  ☆330Jan 28, 2021Updated 5 years ago
• uknowsec / OXID_Find

  View on GitHub
  OXID_Find by C++（多线程） 通过OXID解析器获取Windows远程主机上网卡地址
  ☆86Jul 19, 2020Updated 5 years ago
• huoji120 / CobaltStrikeDetected

  View on GitHub
  40行代码检测到大部分CobaltStrike的shellcode
  ☆293Jul 25, 2021Updated 4 years ago
• RicterZ / PySharpSphere

  View on GitHub
  Yet another SharpSphere
  ☆227Aug 1, 2021Updated 4 years ago
• anthemtotheego / InlineExecute-Assembly

  View on GitHub
  InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assem…
  ☆741Jul 22, 2023Updated 2 years ago
• rsmudge / ZeroLogon-BOF

  View on GitHub
  ☆163Apr 25, 2022Updated 3 years ago
• akkuman / EvilEye

  View on GitHub
  A BeaconEye implement in Golang. It is used to detect the cobaltstrike beacon from memory and extract some configuration.
  ☆162Sep 6, 2022Updated 3 years ago
• ZanderChang / anti-sandbox

  View on GitHub
  Windows对抗沙箱和虚拟机的方法总结
  ☆402Apr 22, 2020Updated 5 years ago
• darkr4y / geacon

  View on GitHub
  Practice Go programming and implement CobaltStrike's Beacon in Go
  ☆1,260Oct 2, 2020Updated 5 years ago
• Richard-Tang / CrossC2-C2Profile

  View on GitHub
  CrossC2通信协议API实现
  ☆84Jul 26, 2021Updated 4 years ago
• boku7 / spawn

  View on GitHub
  Cobalt Strike BOF that spawns a sacrificial process, injects it with shellcode, and executes payload. Built to evade EDR/UserLand hooks b…
  ☆469Mar 8, 2023Updated 2 years ago
• mai1zhi2 / ShellCodeFramework

  View on GitHub
  绕3环的shellcode免杀框架
  ☆574Mar 19, 2021Updated 4 years ago
• mgeeky / ElusiveMice

  View on GitHub
  Cobalt Strike User-Defined Reflective Loader with AV/EDR Evasion in mind
  ☆482Jul 12, 2023Updated 2 years ago
• Rvn0xsy / Cobaltstrike-atexec

  View on GitHub
  使得Cobaltstrike支持Atexec
  ☆89Jun 30, 2020Updated 5 years ago
• Ridter / SharpAddDomainMachine

  View on GitHub
  SharpAddDomainMachine
  ☆69Oct 12, 2021Updated 4 years ago
• Ridter / RelayX

  View on GitHub
  NTLM relay test.
  ☆195Jun 26, 2025Updated 7 months ago
• oXis / GPUSleep

  View on GitHub
  Move CS beacon to GPU memory when sleeping
  ☆251Nov 19, 2021Updated 4 years ago
• JamVayne / CobaltStrikeDos

  View on GitHub
  CVE-2021-36798: CobaltStrike < 4.4 Dos
  ☆103Sep 26, 2021Updated 4 years ago
• Flangvik / SharpProxyLogon

  View on GitHub
  C# POC for CVE-2021-26855 aka ProxyLogon, supports the classically semi-interactive web shell as well as shellcode injection
  ☆252Mar 31, 2021Updated 4 years ago
• alfarom256 / BOF-ForeignLsass

  View on GitHub
  ☆101Aug 23, 2021Updated 4 years ago
• Ridter / proxyshell_payload

  View on GitHub
  proxyshell payload generate
  ☆75Aug 14, 2021Updated 4 years ago
• SolomonSklash / SleepyCrypt

  View on GitHub
  A shellcode function to encrypt a running process image when sleeping.
  ☆340Sep 11, 2021Updated 4 years ago