ORCA666 / EVA3

Related projects: ⓘ

• ORCA666 / EarlyBird
  ☆42Updated this week
• BOFs / BOFs
  Beacon Object Files.
  ☆31Updated 6 months ago
• Kara-4search / Fiber_ShellcodeExecution
  Using fibers to execute shellcode in a local process via csharp
  ☆28Updated 2 years ago
• sliverarmory / COFFLoader
  ☆36Updated last year
• tijme / kernel-mii
  Cobalt Strike (CS) Beacon Object File (BOF) foundation for kernel exploitation using CVE-2021-21551.
  ☆78Updated last year
• cube0x0 / SharpMapModules
  ☆66Updated this week
• Rrarandom / UAC_Bypass
  ☆27Updated this week
• 11philip22 / UUID2Shellcode
  Loader that loads shellcode from UUID's
  ☆22Updated 3 years ago
• ORCA666 / artifact32
  ☆25Updated this week
• expl0itabl3 / uac-bypass-cmstp
  Use CMSTP.exe to bypass UAC.
  ☆36Updated 2 years ago
• ORCA666 / ACHLYSv2
  ☆23Updated this week
• ORCA666 / 0x41
  ☆28Updated this week
• seahop / titan
  Titan: A generic user defined reflective DLL for Cobalt Strike
  ☆67Updated last year
• exploitblizzard / Syscall-Example
  Using syscall to load shellcode, Evasion techniques
  ☆27Updated 3 years ago
• Jeffry38 / HiddenVNC
  A simple hidden vnc.
  ☆31Updated 3 years ago
• timwhitez / Spoofing-Gate
  (Hellsgate|Halosgate|Tartarosgate)+Spoofing-Gate. Ensures that all systemcalls go through ntdll.dll
  ☆41Updated 2 years ago
• Kara-4search / HookDetection_CSharp
  HookDetection
  ☆44Updated 3 years ago
• OG-Sadpanda / SharpZippo
  List/Read contents of Zip files (in memory and without extraction) using CobaltStrike's Execute-Assembly
  ☆58Updated 2 years ago
• nick-frischkorn / TokenStripBOF
  Beacon Object File to delete token privileges and lower the integrity level to untrusted for a specified process
  ☆32Updated 2 years ago
• Gr1mmie / SharpShellCodeObfus
  Caeser Cipher your shellcode!
  ☆20Updated 2 years ago
• jbaines-r7 / blankspace
  Proof of Concept for EFSRPC Arbitrary File Upload (CVE-2021-43893)
  ☆61Updated 2 years ago
• timwhitez / Doge-BlockDLLs
  Preventing 3rd Party DLLs from Injecting into your Malware
  ☆24Updated 3 years ago
• lpBunny / bof-registry
  ☆16Updated this week
• sliverarmory / injectAmsiBypass
  Cobalt Strike BOF - Bypass AMSI in a remote process with code injection.
  ☆48Updated 2 years ago
• EncodeGroup / RegSave
  A .NET implementation to dump SAM / SECURITY / SYSTEM registry hives
  ☆47Updated 3 years ago
• HuskyHacks / CobaltNotion
  A spin-off research project. Cobalt Strike x Notion collab 2022
  ☆53Updated 2 years ago
• aaaddress1 / xlsKami
  Out-of-the-Box Tool to Obfuscate Excel XLS. Include Obfuscation & Hide for Cell Labels & BoundSheets
  ☆47Updated 3 years ago
• sliverarmory / injectEtwBypass
  CobaltStrike BOF - Inject ETW Bypass into Remote Process via Syscalls (HellsGate|HalosGate)
  ☆30Updated 2 years ago
• jnqpblc / SharpDir
  SharpDir is a simple code set to search both local and remote file systems for files and is compatible with Cobalt Strike.
  ☆26Updated 5 years ago
• OlivierLaflamme / DNSWho
  transmit cs beacon (shellcode) over self-made dns to avoid anti-kill and AV
  ☆50Updated 3 years ago