A launcher to load a DLL with xored cobalt strike shellcode executed in memory through process hollowing technique
☆27Nov 11, 2022Updated 3 years ago
Alternatives and similar repositories for CobaltStrikeBypassDefender
Users that are interested in CobaltStrikeBypassDefender are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Python script for extracting and decrypting Group Policy Preferences passwords☆26May 28, 2021Updated 5 years ago
- VULNSPY regularly retrieves the latest alerts published by the CERT-FR and the related vulnerabilities with their CVSS score and allows y…☆38Nov 3, 2022Updated 3 years ago
- Un dropper de payload indétectable qui désactive l'antivirus Windows Defender puis paramètre un fichier batch à l'ouverture de session de…☆13Mar 6, 2021Updated 5 years ago
- ☆57Jan 15, 2024Updated 2 years ago
- Windows notifier tool that detects suspicious connections by monitoring ETW event logs☆125Dec 8, 2022Updated 3 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- Cobalt Strike BOF to obtain location data☆30Jul 4, 2026Updated 3 months ago
- Patches the AmsiScan function in clr.dll allowing for unrestricted assembly loading in .NET☆52May 5, 2025Updated last year
- Takes a raw shellcode file (or a hex string) and produces a standalone .exe☆13May 29, 2026Updated 5 months ago
- ☆15Aug 17, 2023Updated 3 years ago
- XXST-白加黑辅助挖掘工具 ，全程静默运行不影响正常使用☆17Apr 12, 2024Updated 2 years ago
- ☆16Jan 15, 2026Updated 9 months ago
- Encrypted shellcode injector with basic virtual machine evasion using C++☆10Oct 16, 2021Updated 5 years ago
- Parses Cobalt Strike malleable C2 profiles.☆64Updated this week
- Used to AES encrypt shellcode, can take password or use built in default should be used with Iron Injector to generate and execute shellc…☆15Mar 18, 2022Updated 4 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- This is a very simple BOF written for Cobalt Strike and other post exploitation frameworks that I reimplemented from one of my C++ tools.…☆15Dec 16, 2023Updated 2 years ago
- A collection of Cobalt Strike Malleable C2 profiles☆36Oct 13, 2020Updated 6 years ago
- Cobalt Strike BOF to list Windows Pipes & return their Owners & DACL Permissions☆96Mar 8, 2023Updated 3 years ago
- External C2 is a specification to allow third-party programs to act as a communication layer for Cobalt Strike’s Beacon payload.☆23Jul 17, 2025Updated last year
- A C# Tool to gather information about email breaches☆17Dec 21, 2023Updated 2 years ago
- Interactive program for loading AES encrypted shellcode with Dynamic Invocation, and interactive .NET assemblies in memory.☆12Mar 16, 2022Updated 4 years ago
- Automate your C2 creation with Azure Frontdoor and randomly generated options☆15Sep 20, 2024Updated 2 years ago
- TeamServer.prop is an optional properties file used by the Cobalt Strike teamserver to customize the settings used to validate screenshot…☆71Jun 12, 2026Updated 4 months ago
- Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable…☆34Mar 28, 2026Updated 7 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Cobaltstrike UDRL with memory evasion☆15May 16, 2024Updated 2 years ago
- Sophisticated In-Memory PE loader for Cobalt Strike☆24Jan 24, 2026Updated 9 months ago
- ☆31Sep 1, 2023Updated 3 years ago
- badger-builder is an AI-assisted tool for generating dynamic Brute Ratel C4 profiles☆54Nov 21, 2024Updated last year
- A BOF designed to inspect processes memory and addresses☆42Apr 19, 2026Updated 6 months ago
- AV bypass while you sip your Chai!☆223May 17, 2024Updated 2 years ago
- Sliver agents for Mythic☆50Nov 18, 2024Updated last year
- Code snippets to add on top of cobalt strike sleep mask to achieve patchless hook on AMSI and ETW☆87Mar 19, 2023Updated 3 years ago
- shellcode loader for your evasion needs☆353Apr 30, 2025Updated last year
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- ☆11Feb 12, 2023Updated 3 years ago
- Payload Dropper with Persistance & Privesc & UAC bypass 🐱👤☆15Apr 8, 2024Updated 2 years ago
- ☆20Aug 10, 2022Updated 4 years ago
- Using LNK files and user input simulation to start processes under explorer.exe☆33Sep 21, 2024Updated 2 years ago
- kASLR bypass technique on Intel CPUs.☆35May 18, 2025Updated last year
- An all-in-one Cobalt Strike BOF to patch, check and revert AMSI and ETW for x64 process. Both syscalls and dynamic resolve versions are a…☆146Oct 1, 2022Updated 4 years ago
- Repository for the DEF CON 33 talk: Kill Chain Reloaded☆87Aug 3, 2025Updated last year