Cobalt Strike (CS) Beacon Object File (BOF) foundation for kernel exploitation using CVE-2021-21551.
☆29Jun 7, 2023Updated 3 years ago
Alternatives and similar repositories for kernel-mii
Users that are interested in kernel-mii are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A compilation of Aggressor/Sleep scripts for operational purposes that I've made.☆11Sep 17, 2021Updated 5 years ago
- This repository contains several AMSI bypasses. These bypasses are based on some very nice research that has been put out by some awesome…☆22Jul 7, 2022Updated 4 years ago
- A simple to use single-include Windows API resolver☆22Jul 9, 2024Updated 2 years ago
- ☆100Aug 23, 2021Updated 5 years ago
- ☆61Aug 30, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A BOF to parse the imports of a provided PE-file, optionally extracting symbols on a per-dll basis.☆86Oct 28, 2021Updated 5 years ago
- Cobalt Strike Get clipboard plugin☆16Aug 11, 2023Updated 3 years ago
- ☆142May 4, 2022Updated 4 years ago
- CNA that interacts with a JAR file to dynamically rename GUI tabs within Cobalt Strike from a JSON file.☆25May 23, 2022Updated 4 years ago
- Laz-y project compatible C# templates for shellcode injection.☆20May 1, 2022Updated 4 years ago
- ☆118Jun 17, 2022Updated 4 years ago
- Cobalt Strike BOF to list Windows Pipes & return their Owners & DACL Permissions☆52Dec 21, 2021Updated 4 years ago
- A .NET XOR encrypted cobalt strike aggressor implementation for chisel to utilize faster proxy and advanced socks5 capabilities.☆463Mar 25, 2024Updated 2 years ago
- A BOF for enumerating version information for DLLs associated for a Beacon process.☆16Nov 23, 2021Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Offensive RPC PoC☆90Sep 29, 2021Updated 5 years ago
- An aggressor script for Cobalt Strike to query Windows' GetLastError messages☆18Sep 25, 2022Updated 4 years ago
- A care package of useful bofs for red team engagments☆53Dec 6, 2024Updated last year
- Zoom Persistence Aggressor and Handler☆57Mar 24, 2021Updated 5 years ago
- Simple Aggressor Scripts for Cobalt Strike☆13Sep 24, 2020Updated 6 years ago
- ☆78Jun 17, 2025Updated last year
- Cobalt Strike BOF for quser.exe implementation using Windows API☆89Mar 22, 2023Updated 3 years ago
- This repo hosts a poc of how to execute F# code within an unmanaged process☆71Jun 25, 2024Updated 2 years ago
- Strstr with user-supplied needle and filename as a BOF.☆32Sep 27, 2021Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆30Jul 18, 2025Updated last year
- A BOF.NET program to split a file into smaller chunks and email it via a specified SMTP relay.☆17Jun 24, 2021Updated 5 years ago
- Dump Lsass Memory Using a Reflective Dll☆14Feb 4, 2022Updated 4 years ago
- WMkick is a TCP protocol redirector/MITM tool that targets NTLM authentication message flows in WMI (135/tcp) and Powershell-Remoting/WSM…☆41Aug 2, 2021Updated 5 years ago
- Extended Process List (Search functionality)☆28Jan 23, 2021Updated 5 years ago
- Small POC for process ghosting☆39Feb 1, 2022Updated 4 years ago
- Proof of Concept code and samples presenting emerging threat of MSI installer files.☆94Dec 15, 2022Updated 3 years ago
- Killing your preferred antimalware by abusing native symbolic links and NT paths.☆363Jan 29, 2022Updated 4 years ago
- Mochi is a proof-of-concept C++ loader that leverages the ChaiScript embedded scripting language to execute code.☆101Mar 27, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A quick example of the Hells Gate technique in Nim☆92Aug 11, 2021Updated 5 years ago
- C# Data Collector for the BloodHound Project, Version 3☆35Dec 28, 2021Updated 4 years ago
- A faithful transposition of the key features/functionality of @itm4n's PPLDump project as a BOF.☆142Sep 24, 2021Updated 5 years ago
- CobaltStrike BOF - Inject ETW Bypass into Remote Process via Syscalls (HellsGate|HalosGate)☆297Sep 28, 2021Updated 5 years ago
- Example of using Sleep to create better named pipes.☆40Jul 25, 2023Updated 3 years ago
- This aggressor script uses a beacon's note field to indicate the health status of a beacon.☆143Sep 29, 2021Updated 5 years ago
- ☆13May 27, 2020Updated 6 years ago