Alternatives and similar repositories for SyscallPOC:

Users that are interested in SyscallPOC are comparing it to the libraries listed below

• m57 / cobaltstrike_bofs
  My CobaltStrike BOFS
  ☆162Updated 2 years ago
• rxwx / cs-rdll-ipc-example
  Example code for using named pipe output with beacon ReflectiveDLLs
  ☆113Updated 4 years ago
• FalconForceTeam / SysWhispers2BOF
  Script to use SysWhispers2 direct system calls from Cobalt Strike BOFs
  ☆122Updated 2 years ago
• gitjdm / dumper2020
  Yet another LSASS dumper
  ☆76Updated 4 years ago
• sailay1996 / windows-stuff
  my learning case about windows
  ☆21Updated 3 years ago
• S3cur3Th1sSh1t / NamedPipePTH
  Pass the Hash to a named pipe for token Impersonation
  ☆141Updated 3 years ago
• boku7 / whereami
  Cobalt Strike Beacon Object File (BOF) that uses handwritten shellcode to return the process Environment strings without touching any DLL…
  ☆169Updated 2 years ago
• morph3 / Windows-RPC-Backdoor
  Simple windows rpc server for research purposes only
  ☆82Updated 2 years ago
• tomcarver16 / BOF-DLL-Inject
  Manual Map DLL injection implemented with Cobalt Strike's Beacon Object Files.
  ☆151Updated 4 years ago
• EncodeGroup / AggressiveGadgetToJScript
  A Cobalt Strike Aggressor script to generate GadgetToJScript payloads
  ☆99Updated 4 years ago
• rookuu / BOFs
  Collection of beacon object files for use with Cobalt Strike to facilitate 🐚.
  ☆174Updated 4 years ago
• n4ll3ec / AggressorSploit
  Collect & Optimize awesome CobaltStrike aggressor scripts, hope to create a All-In-One framework.
  ☆37Updated 4 years ago
• EspressoCake / PPLDump_BOF
  A faithful transposition of the key features/functionality of @itm4n's PPLDump project as a BOF.
  ☆139Updated 3 years ago
• Aetsu / SLib
  SLib is a sandbox evasion library that implements some of the checks from https://evasions.checkpoint.com in C#
  ☆64Updated last year
• outflanknl / Zipper
  Zipper, a CobaltStrike file and folder compression utility.
  ☆216Updated 5 years ago
• marpie / signed-loaders
  signed-loaders documents Windows executables that can be used for side-loading DLLs.
  ☆67Updated 6 years ago
• JohnWoodman / stealthInjector
  Injects shellcode into remote processes using direct syscalls
  ☆75Updated 4 years ago
• embee-research / Randomise-api-hashes-cobalt-strike
  Bypass Detection By Randomising ROR13 API Hashes
  ☆136Updated 3 years ago
• icyguider / DumpNParse
  A Combination LSASS Dumper and LSASS Parser. All Credit goes to @slyd0g and @cube0x0.
  ☆149Updated 3 years ago
• waldo-irc / LockdExeDemo
  A demo of the relevant blog post: https://www.arashparsa.com/hook-heaps-and-live-free/
  ☆185Updated 3 years ago
• anthemtotheego / C_Shot
  ☆112Updated 4 years ago
• EncodeGroup / BOF-RegSave
  Dumping SAM / SECURITY / SYSTEM registry hives with a Beacon Object File
  ☆193Updated 4 years ago
• mrd0x / pe2shc-to-cdb
  Convert shellcode generated using pe_2_shellcode to cdb format.
  ☆96Updated 3 years ago
• jfmaes / SharpNukeEventLog
  nuke that event log using some epic dinvoke fu
  ☆117Updated 3 years ago
• byt3bl33d3r / BOF-Nim
  Cobalt Strike BOF Files with Nim!
  ☆84Updated 2 years ago
• mdsecactivebreach / firewalker
  ☆148Updated 4 years ago
• boku7 / injectEtwBypass
  CobaltStrike BOF - Inject ETW Bypass into Remote Process via Syscalls (HellsGate|HalosGate)
  ☆278Updated 3 years ago
• pwn1sher / CS-BOFs
  Collection of CobaltStrike beacon object files
  ☆102Updated 3 years ago
• 0xB455 / AmsiBypass
  C# PoC implementation for bypassing AMSI via in memory patching
  ☆65Updated 4 years ago
• airzero24 / WMIReg
  PoC to interact with local/remote registry hives through WMI
  ☆86Updated 4 years ago