Octoberfest7 / Inline-Execute-PE
Execute unmanaged Windows executables in CobaltStrike Beacons
☆650Updated last year
Alternatives and similar repositories for Inline-Execute-PE:
Users that are interested in Inline-Execute-PE are comparing it to the libraries listed below
- A DLL loader with advanced evasive features☆687Updated last year
- ☆683Updated last year
- InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assem…☆630Updated last year
- A BOF that runs unmanaged PEs inline☆566Updated 2 months ago
- Cobalt Strike User-Defined Reflective Loader with AV/EDR Evasion in mind☆430Updated last year
- Collection of Beacon Object Files (BOF) for Cobalt Strike☆557Updated 6 months ago
- Bypass EDR Hooks by patching NT API stub, and resolving SSNs and syscall instructions at runtime☆301Updated last year
- A CobaltStrike toolkit to write files produced by Beacon to memory instead of disk☆443Updated 6 months ago
- ☆517Updated 10 months ago
- laZzzy is a shellcode loader, developed using different open-source libraries, that demonstrates different execution techniques.☆467Updated 2 years ago
- BOF implementation of @_EthicalChaos_'s ThreadlessInject project. A novel process injection technique with no thread creation, released a…☆370Updated last year
- Automated DLL Sideloading Tool With EDR Evasion Capabilities☆464Updated last year
- Cobalt Strike UDRL for memory scanner evasion.☆895Updated 7 months ago
- Creating a repository with all public Beacon Object Files (BoFs)☆443Updated last year
- A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!☆320Updated 5 months ago
- TartarusGate, Bypassing EDRs☆557Updated 2 years ago
- A Nim implementation of reflective PE-Loading from memory☆274Updated 4 months ago
- Collection of Beacon Object Files☆566Updated 2 years ago
- PIC lsass dumper using cloned handles☆578Updated 2 years ago
- UDRL for CS☆419Updated last year
- A .NET Runtime for Cobalt Strike's Beacon Object Files☆687Updated 4 months ago
- Collection of remote authentication triggers in C#☆472Updated 8 months ago
- .Net port of the remote SAM + LSA Secrets dumping functionality of impacket's secretsdump.py☆598Updated last year
- COM Hijacking VOODOO☆262Updated 10 months ago
- A .NET XOR encrypted cobalt strike aggressor implementation for chisel to utilize faster proxy and advanced socks5 capabilities.☆444Updated 9 months ago
- Cobalt Strike BOF that spawns a sacrificial process, injects it with shellcode, and executes payload. Built to evade EDR/UserLand hooks b…☆444Updated last year
- A Payload Loader Designed With Advanced Evasion Features☆507Updated 2 years ago
- A Stealthy Lsass Dumper - can abuse ProcExp152.sys driver to dump PPL Lsass, no dbghelp.lib calls.☆316Updated last year
- Various Cobalt Strike BOFs☆600Updated 2 years ago