A community maintained repository of Beacon Object Files (BOFs) for red team operations, research, and education. Our goal is to provide a centralized collection of high quality BOFs, making them easier to discover, use, and contribute to.
☆34Aug 8, 2026Updated 2 months ago
Alternatives and similar repositories for OpenBOF
Users that are interested in OpenBOF are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A collection of DPAPI hunting and parsing BOFs☆39Mar 3, 2026Updated 8 months ago
- A collection of BOF-PE's that allow running tailscale from memory☆141Aug 27, 2026Updated 2 months ago
- Async BOF to capture KeePass master passwords by detecting and keylogging locked database windows.☆51Jul 23, 2026Updated 3 months ago
- Async BOF to automatically extract or renew Kerberos TGTs on a target system.☆139Jul 23, 2026Updated 3 months ago
- Async BOF that notifies the operator when a user connects to a local or remote target system.☆34Jul 30, 2026Updated 3 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Mythic C2 MSTeams Communication Channel☆42Sep 13, 2026Updated last month
- Async BOF to monitor and detect clipboard changes on a target system and return the clipboard contents.☆22Jul 23, 2026Updated 3 months ago
- Mythic Peer to Peer (P2P) Communication Protocol via. LLDP☆25Aug 20, 2026Updated 2 months ago
- A CET-compatible Windows x64 loader that produces fully backed call stacks through runtime function table manipulation, code cave injecti…☆135Sep 6, 2026Updated 2 months ago
- example use of defining your own injection technique for explicit injection and or spawn (fork & run)☆19Jan 3, 2026Updated 10 months ago
- SilentChrome-BOF installs Chromium extension, native messaging, and Isolated Web App profile artifacts☆53Aug 10, 2026Updated 2 months ago
- dcsync bof☆54Feb 13, 2026Updated 8 months ago
- BOF and research notes from hunting execution paths, covering Shell.HWEventHandlerShellExecute COM execution through the AutoPlay IHWEven…☆39Jun 20, 2026Updated 4 months ago
- BOF to impersonate TrustedInstaller via DISM API trigger and thread impersonation☆136Mar 27, 2026Updated 7 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Beacon Object File to Enable Chrome DevTools Protocol (CDP)☆134Oct 17, 2026Updated 3 weeks ago
- Sleep replacement that executes real, varied work to break behavioral pattern matching by EDR and anti-cheat systems☆92Jul 20, 2026Updated 3 months ago
- Repository for various Beacon Object Files (BOFs)☆185Oct 22, 2026Updated 2 weeks ago
- A workshop about core UDRL mechanics by Joris Ignoul & Mickey De Baets☆23Jun 12, 2026Updated 4 months ago
- Enhanced Evasion for Threadless Injections☆15May 29, 2026Updated 5 months ago
- ☆32Oct 22, 2026Updated 2 weeks ago
- POC Utilizing the new SleepMask-VS kit to utilize RC4 encryption.☆12Mar 4, 2025Updated last year
- Hades is a fully-featured cross-platform Chrome Extension agent. Hades is designed for Mythic 3.0 and newer.☆49Aug 12, 2026Updated 2 months ago
- OneDrive as a covert C2 transport for Cobalt Strike☆79Sep 19, 2026Updated last month
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Beacon Object File (BOF) implementation of the dnscmd.exe functionality used to obtain remote code execution on an ADIDNS server by explo…☆58Jul 8, 2026Updated 3 months ago
- A toolkit for testing and benchmarking WPI techniques☆23Sep 2, 2026Updated 2 months ago
- Cobalt Strike BOF that extracts selected Windows registry hives directly from a raw NTFS volume by parsing NTFS metadata and reading file…☆112Oct 11, 2026Updated 3 weeks ago
- PIC shellcode agent based on Stardust framework and Crystal Palace☆94Updated this week
- Cobalt Strike BOF for extracting Firefox passwords and cookies. Decrypts saved credentials using NSS, supports key3.db/key4.db, logins.js…☆42Jul 5, 2026Updated 4 months ago
- Runtime Credential Guard deactivation via \\LSA_ISO_DISABLE_CREDENTIAL_GUARD + LSASS NT hash extraction (Win11 24H2)☆108Oct 27, 2026Updated last week
- BAADTokenBroker is a post-exploitation tool designed to interact with Microsoft Entra ID device-bound keys.☆82Apr 11, 2026Updated 6 months ago
- ANIMO Azure Network Intel & Mission Ops a C2 based on Azure/Entra assessments☆95Sep 16, 2026Updated last month
- Tailscale/Headscale C2 profile and agent for Mythic☆35Mar 14, 2026Updated 7 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- One WSL BOF to rule them all☆190Jan 14, 2026Updated 9 months ago
- Blind AV solutions by setting firewall rules to block outgoing connections☆16Jun 9, 2024Updated 2 years ago
- Ask the Web Account Manager (WAM) for Entra ID tokens☆167Sep 11, 2026Updated last month
- psexec-like remote execution using the paexec wire protocol that supports paexec and remoteexecm2 from manageengine adselfservice plus☆44Mar 24, 2026Updated 7 months ago
- A python proof of concept tool to assist in your payloads classification against EDR/AV's machine learning models☆39Oct 14, 2026Updated 3 weeks ago
- BingusLdr is a DLL loader built with Crystal Palace that uses a CET compatible stack spoofing technique.☆117Jul 14, 2026Updated 3 months ago
- Atomic test units for BOF execution☆62Apr 26, 2026Updated 6 months ago