☆14Jul 26, 2026Updated 3 months ago
Alternatives and similar repositories for Timeroast-BOF
Users that are interested in Timeroast-BOF are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆13Jun 7, 2026Updated 5 months ago
- A proof of concept that makes a Windows syscall look like it came from a legitimate Windows thread pool, with no trace of your own code a…☆15Jul 15, 2026Updated 3 months ago
- Another Injection Technique which eliminates creations of thread in remote process☆29Jul 7, 2026Updated 4 months ago
- A Bof to dump domain credentials via DRSGetNCChanges, Created for use with the Adaptix C2.☆15Dec 16, 2025Updated 10 months ago
- Builds a synthetic stack using return address gadgets resolved from ntdll.dll functions. Syscall fires and returns cleanly with no user-…☆12Jun 5, 2026Updated 5 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- The swiss army knife of LSASS dumping☆14Jan 4, 2026Updated 10 months ago
- Process Explorer vulnerable driver PPL Bypass☆28Sep 30, 2026Updated last month
- Svn sync of http://svn.code.sf.net/p/rdp2tcp/code/, the true master of this project☆12Sep 21, 2022Updated 4 years ago
- Custom PIC C2 agent for Adaptix with no reflective loader.☆31Updated this week
- a short script to make my life easy : ) nothing more☆13Jul 6, 2026Updated 4 months ago
- Simple, header-only, pattern matching and patching class + tool written in modern C++.☆25Jun 5, 2026Updated 5 months ago
- A Position Independent Code (PIC) implementation of the execute-assembly command built with Crystal Palace.☆22Oct 4, 2026Updated last month
- ☆13Jun 8, 2026Updated 5 months ago
- Sleep Obfuscation via CreateThreadpoolTimer☆24Jul 27, 2026Updated 3 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A simple research-focused AES-based shellcode loader demonstrating in-memory execution and NTAPI techniques to help understand how custom…☆55Feb 19, 2026Updated 8 months ago
- Gain shellcode execution via T4 Text Transform files/TextTransoform.exe☆87Oct 23, 2026Updated 2 weeks ago
- A community maintained repository of Beacon Object Files (BOFs) for red team operations, research, and education. Our goal is to provide …☆35Aug 8, 2026Updated 3 months ago
- A collection of techniques for process injection on Windows☆105Updated this week
- Demonstration of the DLL party process injection technique☆99Oct 1, 2026Updated last month
- UAC Bypass using CMSTP in Rust☆43Dec 6, 2024Updated last year
- A BOF for patching AMSI, ETW and NtTraceEvent aka Sysmon using Trampolines☆13Jul 30, 2026Updated 3 months ago
- Load various payload (DLL from memory, Exe, etc...) in a way to evade static analysis of Antivirus. It can fetch data from various method…☆22Jun 18, 2026Updated 4 months ago
- Runtime Credential Guard deactivation via \\LSA_ISO_DISABLE_CREDENTIAL_GUARD + LSASS NT hash extraction (Win11 24H2)☆109Oct 27, 2026Updated 2 weeks ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Object File (BOF) that demonstrates privilege escalation through a misconfigured AlwaysInstallElevated policy.☆13Sep 17, 2026Updated last month
- SharpWSUS is a c# tool for abusing Microsoft Windows Server Update Services for Lateral Movement☆11Nov 20, 2022Updated 3 years ago
- CLIPBRDWNDCLASS process injection technique(BOF) - execute beacon shellcode in callback☆68Sep 15, 2022Updated 4 years ago
- GPOMap is a PowerShell-based Active Directory auditing tool that maps Group Policy Objects (GPOs), detects misconfigurations, flags risky…☆12Mar 30, 2025Updated last year
- A C# tool for extracting information from SCCM PXE boot media.☆57May 21, 2026Updated 5 months ago
- A technique that mixes NTDLL unhooking and hellsgate gate varients☆37Oct 28, 2026Updated 2 weeks ago
- EDR evasion uses stealth injection via SendMessage with WM_SETTEXT to effective bypass EDR (Endpoint Detection and Response)☆79Oct 18, 2026Updated 3 weeks ago
- Rust-based Windows kernel driver research project with a companion user-mode client for IOCTL-based experiments with process, token, PPL,…☆20Apr 30, 2026Updated 6 months ago
- Cobalt Strike BOF☆58Dec 10, 2025Updated 11 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Pure-impacket parallel local-admin discovery via RBCD.☆47Oct 9, 2026Updated last month
- A few BOF files to help facilitate reading and writing bytes to DLL function calls.☆12Jun 16, 2025Updated last year
- ☆16Oct 14, 2026Updated 3 weeks ago
- ☆14Oct 1, 2025Updated last year
- Multithreaded C# .NET Assembly to enumerate accessible network shares in a domain☆33Nov 13, 2023Updated 2 years ago
- C2Matrix Automation☆16Sep 10, 2023Updated 3 years ago
- A tool to easily perform GitLab Device Code Phishing on red team engagements☆57Feb 9, 2026Updated 9 months ago
Are these results useful?