REDMED-X / InjectKitLinks
Modified versions of the Cobalt Strike Process Injection Kit
☆105Updated 2 years ago
Alternatives and similar repositories for InjectKit
Users that are interested in InjectKit are comparing it to the libraries listed below
Sorting:
- Alternative Shellcode Execution Via Callbacks in C# with P/Invoke☆85Updated 2 years ago
- ☆129Updated 2 years ago
- ☆100Updated last year
- A C# port from Invoke-GhostTask☆119Updated 2 years ago
- Cobalt Strike + Brute Ratel C4 Beacon Object File (BOF) Conversion of the Mockingjay Process Injection Technique☆157Updated 2 years ago
- Run Cobalt Strike BOFs in Brute Ratel C4!☆85Updated 9 months ago
- ☆84Updated 2 years ago
- Tool to bypass LSA Protection (aka Protected Process Light)☆64Updated last year
- ☆75Updated last year
- Lateral Movement via the .NET Profiler☆99Updated last year
- ☆109Updated 11 months ago
- ☆92Updated last year
- In-memory sleep encryption and heap encryption for Go applications through a shellcode function.☆40Updated 2 years ago
- Code snippets to add on top of cobalt strike sleep mask to achieve patchless hook on AMSI and ETW☆86Updated 2 years ago
- ☆131Updated 2 years ago
- ☆122Updated 2 years ago
- Aggressor script add-in for CobaltStrike to track file uploads☆49Updated 3 years ago
- A collection of (even more) alternative shellcode callback methods in CSharp☆81Updated last year
- Beacon Object Files (BOFs) for Cobalt Strike and Havoc C2. Implementations of Active Directory attacks and post-exploitation techniques.☆95Updated last week
- Terminate AV/EDR leveraging BYOVD attack☆104Updated 10 months ago
- ☆49Updated 7 months ago
- Execute commands in other Sessions☆91Updated last year
- ☆123Updated last year
- ☆72Updated 3 years ago
- Simple BOF to read the protection level of a process☆119Updated 2 years ago
- Click Once + App Domain☆64Updated 2 years ago
- ☆143Updated 2 years ago
- A PICO for Crystal Palace that implements CLR hosting to execute a .NET assembly in memory.☆126Updated last month
- Identify common EDR processes, directories, and services. Simple BOF of Invoke-EDRChecker.☆128Updated last year
- ☆94Updated 2 years ago