REDMED-X / InjectKitLinks
Modified versions of the Cobalt Strike Process Injection Kit
☆102Updated last year
Alternatives and similar repositories for InjectKit
Users that are interested in InjectKit are comparing it to the libraries listed below
Sorting:
- Alternative Shellcode Execution Via Callbacks in C# with P/Invoke☆84Updated 2 years ago
- ☆128Updated 2 years ago
- Cobalt Strike + Brute Ratel C4 Beacon Object File (BOF) Conversion of the Mockingjay Process Injection Technique☆157Updated 2 years ago
- ☆98Updated last year
- ☆82Updated 2 years ago
- A C# port from Invoke-GhostTask☆118Updated last year
- Run Cobalt Strike BOFs in Brute Ratel C4!☆81Updated 6 months ago
- ☆109Updated 8 months ago
- Tool to bypass LSA Protection (aka Protected Process Light)☆61Updated 10 months ago
- Code snippets to add on top of cobalt strike sleep mask to achieve patchless hook on AMSI and ETW☆85Updated 2 years ago
- ☆71Updated 3 years ago
- ☆122Updated 2 years ago
- Lateral Movement via the .NET Profiler☆84Updated 11 months ago
- In-memory sleep encryption and heap encryption for Go applications through a shellcode function.☆40Updated last year
- ☆73Updated last year
- Cobaltstrike Reflective Loader with Synthetic Stackframe☆140Updated 9 months ago
- ☆120Updated 9 months ago
- ☆124Updated 2 years ago
- SharpCoercer is a .NET 4.8 C# tool that leverages 16 different RPC-based coercion methods to force remote Windows hosts to authenticate t…☆49Updated 3 months ago
- ☆91Updated last year
- Terminate AV/EDR leveraging BYOVD attack☆101Updated 7 months ago
- ☆129Updated last year
- Lsass dumper evading (all ?) EDR detection☆26Updated this week
- a C# implementation for a shellcode loader that capable to bypass Cortex XDR and Sophos EDR.☆89Updated 5 months ago
- A collection of (even more) alternative shellcode callback methods in CSharp☆78Updated last year
- Beacon Object File (BOF) to obtain Entra tokens via authcode flow.☆104Updated 6 months ago
- Aggressor script add-in for CobaltStrike to track file uploads☆48Updated 3 years ago
- Simple BOF to read the protection level of a process☆119Updated 2 years ago
- Click Once + App Domain☆64Updated last year
- ☆46Updated 5 months ago