Alternatives and similar repositories for cli4bofs:

Users that are interested in cli4bofs are comparing it to the libraries listed below

• maxDcb / C2Implant
  Windows C++ Implant for Exploration C2
  ☆23Updated this week
• b1-team / phantom
  A memory-based evasion technique which makes shellcode invisible from process start to end.
  ☆15Updated last year
• Binject / exec2shell
  Extracts TEXT section of a PE, ELF, or Mach-O executable to shellcode
  ☆103Updated last year
• parzel / GoBofRunner
  A BOF/COFF loader implemented in Go and CGO.
  ☆16Updated last year
• Cobalt-Strike / callback_examples
  This contains a number of examples demonstrating how to use callback functions in supported aggressor script functions
  ☆30Updated 6 months ago
• timwhitez / Bof2PIC
  BOF/COFF obj file to PIC(shellcode). by golang
  ☆37Updated 2 years ago
• seahop / titan
  Titan: A generic user defined reflective DLL for Cobalt Strike
  ☆75Updated 2 years ago
• ScriptIdiot / sleepmask_ekko_cfg
  Code snippets to add on top of cobalt strike sleepmask kit so that ekko can work in a CFG protected process
  ☆43Updated last year
• florylsk / NtDump
  Indirect NT syscalls LSASS dumper.
  ☆40Updated last year
• tijme / kernel-mii
  Cobalt Strike (CS) Beacon Object File (BOF) foundation for kernel exploitation using CVE-2021-21551.
  ☆79Updated last year
• BambiZombie / ThreadlessSpawn
  A Simple PoC
  ☆19Updated 8 months ago
• outflanknl / linux_bof_template
  ELF Beacon Object File (BOF) Template
  ☆45Updated 2 months ago
• akkuman / gSigFlip
  A SigFlip implement in golang
  ☆46Updated 3 years ago
• ShadowMccc / MemoryEvasion
  A Cobalt Strike memory evasion loader for redteamers
  ☆97Updated last year
• BronzeTicket / ClipboardWindow-Inject
  CLIPBRDWNDCLASS process injection technique(BOF) - execute beacon shellcode in callback
  ☆67Updated 2 years ago
• realoriginal / krbtgs
  old postex for grabbing a krbtgs for my current user
  ☆29Updated last year
• sliverarmory / injectEtwBypass
  CobaltStrike BOF - Inject ETW Bypass into Remote Process via Syscalls (HellsGate|HalosGate)
  ☆30Updated 3 years ago
• timwhitez / Spoofing-Gate
  (Hellsgate|Halosgate|Tartarosgate)+Spoofing-Gate. Ensures that all systemcalls go through ntdll.dll
  ☆43Updated 2 years ago
• c3r3br4t3 / ShadowRDP
  ☆62Updated 11 months ago
• Ethicalrat / Evasive-Loader
  Evasive loader to bypass static detection
  ☆56Updated last year
• timwhitez / memmod
  Fork & modify of Wireguard's Memmod
  ☆31Updated last year
• y11en / BabyBypass
  看起来叫BabyBypass，实际啥都会记一些
  ☆16Updated last year
• timwhitez / AddressOfEntryPoint-injection
  x64 version
  ☆30Updated 3 years ago
• kyxiaxiang / CrackSleeve4.9
  ☆39Updated last year
• dreamkinn / go-ThreadlessInject
  Golang implementation of @CCob's C# ThreadlessInject
  ☆32Updated 8 months ago
• timwhitez / Doge-BlockDLLs
  Preventing 3rd Party DLLs from Injecting into your Malware
  ☆25Updated 3 years ago
• oldboy21 / SyscallMeMaybe
  Implementation of Indirect Syscall technique to pop a calc.exe
  ☆95Updated last year
• roadwy / SideloadFinder
  frida based script which automates the process of discovering and exploiting DLL Hijacks in target binaries. The discovered binaries can …
  ☆50Updated last year
• Kara-4search / Fiber_ShellcodeExecution
  Using fibers to execute shellcode in a local process via csharp
  ☆28Updated 3 years ago
• MrAle98 / Sliver-CPPImplant2
  Sliver agent rewritten in C++
  ☆43Updated 4 months ago