Crystal Palace library for proxying Nt API calls via the Threadpool. Updated for call gadgets.
☆23Nov 11, 2025Updated 11 months ago
Alternatives and similar repositories for LibTP_Gadget
Users that are interested in LibTP_Gadget are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A Crystal Palace shared library to resolve & perform syscalls☆67Oct 29, 2025Updated 11 months ago
- Cobalt Strike BOF to obtain location data☆30Jul 4, 2026Updated 3 months ago
- Header-only compile-time string obfuscation for C++, hiding literals from static analysis and reacting to debuggers at runtime.☆15Oct 5, 2026Updated 3 weeks ago
- Probably the easiest way to setup new beacon notifications in Cobalt Strike☆10Jan 7, 2022Updated 4 years ago
- Atomic test units for BOF execution☆61Apr 26, 2026Updated 6 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- header only library for NtLoadDriver/NtUnloadDriver.☆11Sep 8, 2020Updated 6 years ago
- EQGRP: Replicating DarkPulsar, an DLL capable of hooking Security Package Method Tables on the Heap!☆15Oct 11, 2020Updated 6 years ago
- A collection of DPAPI hunting and parsing BOFs☆39Mar 3, 2026Updated 7 months ago
- An example UDC2 implementation for CrystalC2.☆19Jun 19, 2026Updated 4 months ago
- Querying And Deleting Shadow Copies Using The IOCTL_VOLSNAP_QUERY_NAMES_OF_SNAPSHOTS & IOCTL_VOLSNAP_DELETE_SNAPSHOT IOCTLs☆22Aug 7, 2025Updated last year
- AWS S3 User-Defined C2☆25Oct 6, 2026Updated 3 weeks ago
- BOF POC of the DSCourier project / invoking WinGet via COM☆90Apr 23, 2026Updated 6 months ago
- Find and fix OPSEC leaks in your PE files before defenders do☆46Jul 22, 2026Updated 3 months ago
- Busybox-style Beacon Object Files for *nix post-exploitation. Reimplements common Unix utilities as BOFs for use in stripped environments…☆83Aug 22, 2026Updated 2 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Source-to-source obfuscator (ClangTooling) for C☆13Sep 2, 2026Updated last month
- Service Extender for notifying about AdaptixC2 events in Telegram, Slack, Rocket.Char, Discord, and any web platforms, such as ntfy.sh.☆22Mar 4, 2026Updated 7 months ago
- Surgical UNWIND_INFO preservation for sleep masking without call stack spoofing.☆56Mar 30, 2026Updated 6 months ago
- open source implementation of the UDC2 spec used in Cobalt Strike☆60Jul 4, 2026Updated 3 months ago
- Crystal Palace library for proxying Nt API calls via the Threadpool☆106Oct 18, 2025Updated last year
- BOF to run PE in Cobalt Strike Beacon without console creation☆198Nov 23, 2025Updated 11 months ago
- A Cobalt Strike Beacon Object File that exploits the BlueHammer vulnerability that to obtain a copy of the SAM database.☆165Apr 15, 2026Updated 6 months ago
- SafeHarbor revamped with Direct Syscalls using InlineWhispers3☆15Feb 16, 2026Updated 8 months ago
- abusing windows toast notifications for fun and user manipulation☆106Jul 11, 2026Updated 3 months ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- ☆19Dec 25, 2025Updated 10 months ago
- Detects Module Stomping as implemented by Cobalt Strike☆17Dec 13, 2020Updated 5 years ago
- A modern alternative Web-UI for the Mythic Command and Control Server☆83Jul 3, 2026Updated 3 months ago
- SilentChrome-BOF installs Chromium extension, native messaging, and Isolated Web App profile artifacts☆52Aug 10, 2026Updated 2 months ago
- Prime a process for injection when S1 is present☆13Feb 8, 2025Updated last year
- Reimplementing Havoc Pro Runtime Channel Switching and Cobalt Strike UDC2 features.☆56Oct 11, 2026Updated 2 weeks ago
- A PoC UDRL for Cobalt Strike built with Crystal Palace that combines Raphael Mudge's page streaming technique with a modular call gate (D…☆140Jan 21, 2026Updated 9 months ago
- macOS Container Payload Wrapper☆23Mar 13, 2026Updated 7 months ago
- Windows capability development using GCC and GNU Make☆23Nov 1, 2025Updated 11 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Beacon Object File (BOF) for Windows Session Hijacking via IHxHelpPaneServer COM☆72Dec 25, 2025Updated 10 months ago
- CnaEmulator is a standalone, general-purpose development, emulation, and testing harness for Cobalt Strike Aggressor Scripts (.cna)☆22Sep 20, 2026Updated last month
- A Windows x64 offensive research framework that constructs fully synthetic call stacks☆74Jul 14, 2026Updated 3 months ago
- ☆11Dec 3, 2024Updated last year
- A community maintained repository of Beacon Object Files (BOFs) for red team operations, research, and education. Our goal is to provide …☆34Aug 8, 2026Updated 2 months ago
- Cobalt Strike UDC2 implementation that provides an Slack C2 channel☆70Jan 5, 2026Updated 9 months ago
- ☆38Sep 8, 2026Updated last month