Find and fix OPSEC leaks in your PE files before defenders do
☆47Jul 22, 2026Updated 3 months ago
Alternatives and similar repositories for PE-OopsSec
Users that are interested in PE-OopsSec are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Crystal Palace library for proxying Nt API calls via the Threadpool. Updated for call gadgets.☆23Nov 11, 2025Updated 11 months ago
- Remote process injection via TP_DIRECT.Callback hijack☆41Oct 30, 2026Updated last week
- CVE-2025-59501 POC code☆26Nov 20, 2025Updated 11 months ago
- CnaEmulator is a standalone, general-purpose development, emulation, and testing harness for Cobalt Strike Aggressor Scripts (.cna)☆22Sep 20, 2026Updated last month
- Active Directory snapshots from Linux and macOS in the AD Explorer .dat format. Opens in AD Explorer, works with ADExplorerSnapshot.py an…☆38Sep 11, 2026Updated last month
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Python helper to generate SQL commands to create a custom update in the Windows Service Update Service (WSUS) database.☆16Jun 2, 2026Updated 5 months ago
- A tool for exploiting Kerberos tickets against system with Credential Guard enabled.☆23Sep 2, 2025Updated last year
- Cobalt Strike BOF that extracts selected Windows registry hives directly from a raw NTFS volume by parsing NTFS metadata and reading file…☆112Oct 11, 2026Updated 3 weeks ago
- Atomic test units for BOF execution☆62Apr 26, 2026Updated 6 months ago
- another PrivEsc potato...☆122Sep 5, 2026Updated 2 months ago
- abusing windows toast notifications for fun and user manipulation☆106Jul 11, 2026Updated 3 months ago
- Shellcode Loader for Master Thesis☆74Jul 5, 2026Updated 4 months ago
- AWS S3 User-Defined C2☆27Oct 6, 2026Updated last month
- ☆19Dec 25, 2025Updated 10 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A community maintained repository of Beacon Object Files (BOFs) for red team operations, research, and education. Our goal is to provide …☆34Aug 8, 2026Updated 2 months ago
- ☆57Feb 12, 2026Updated 8 months ago
- Kerberos manipulation library in pure Python☆27Oct 25, 2026Updated last week
- Beacon Object File (BOF) for Windows Session Hijacking via IHxHelpPaneServer COM☆74Dec 25, 2025Updated 10 months ago
- Ask the Web Account Manager (WAM) for Entra ID tokens☆167Sep 11, 2026Updated last month
- Demonstrating 3 persistence layers from a single EXE, that converts itself into proxy DLLs at runtime☆109Mar 29, 2026Updated 7 months ago
- Cross-platform situational-awareness BOFs for Windows, Linux, and macOS☆16Oct 15, 2026Updated 3 weeks ago
- Automatically Download & Compile Useful BOFs for CS☆27Jul 29, 2026Updated 3 months ago
- Async port/ping scanner BOF. Supports IP/port ranges, CIDR notation and hostnames.☆20Jul 23, 2026Updated 3 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Open Source implementation of PsPipeJack☆27May 27, 2026Updated 5 months ago
- Cobalt Strike BOF to obtain location data☆30Jul 4, 2026Updated 4 months ago
- ☆37May 19, 2026Updated 5 months ago
- Manipulation of Toast Notifications to social engineer the user to visit links, harvest credentials etc.☆51Mar 24, 2026Updated 7 months ago
- A credential extraction BOF for Veeam Backup and Replication and Veeam One☆82Sep 16, 2026Updated last month
- Collection of Beacon Object Files (BOFs) that I wrote.☆43Aug 23, 2026Updated 2 months ago
- ☆39Sep 8, 2026Updated last month
- Async BOF that monitors USB device connect/disconnect events, reports device information and performs actions on connected USB storage vo…☆58Jul 23, 2026Updated 3 months ago
- Refreshing Device Bound Session Credentials (DBSC) with Chromiums session store and the Windows CNG API☆31Jul 25, 2026Updated 3 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- An alternative to the builtin clipboard feature in Cobalt Strike that adds the capability to enable/disable and dump the clipboard histor…☆117Apr 16, 2026Updated 6 months ago
- AdaptixC2 default beacon agent extended to support Crystal Palace loaders.☆66May 4, 2026Updated 6 months ago
- Busybox-style Beacon Object Files for *nix post-exploitation. Reimplements common Unix utilities as BOFs for use in stripped environments…☆84Aug 22, 2026Updated 2 months ago
- Combining KslDump and GhostKatz to dump LSASS using no-fix KslD.sys memory read to bypass PPL. Extracts MSV1_0 NT hashes and WDigest clea…☆80Mar 25, 2026Updated 7 months ago
- Reversed cassandra source code for educational purposes☆36Jul 3, 2026Updated 4 months ago
- A tool uses the QoS Policy (Pacer.sys) to throttle Endpoint Detection and Response (EDR) agents from connecting to the server.☆327Jun 13, 2026Updated 4 months ago
- example use of defining your own injection technique for explicit injection and or spawn (fork & run)☆19Jan 3, 2026Updated 10 months ago