WKL-Sec / Winsocky
Winsocket for Cobalt Strike.
☆97Updated last year
Alternatives and similar repositories for Winsocky:
Users that are interested in Winsocky are comparing it to the libraries listed below
- Modified versions of the Cobalt Strike Process Injection Kit☆92Updated last year
- ☆63Updated last year
- ☆78Updated last year
- Fuegoshell is a powershell oneliner generator for Windows remote shell re-using TCP 445☆41Updated 9 months ago
- Alternative Shellcode Execution Via Callbacks in C# with P/Invoke☆76Updated last year
- CVE-2024-40711-exp☆38Updated 4 months ago
- Library of BOFs to interact with SQL servers☆158Updated 2 months ago
- Tool to bypass LSA Protection (aka Protected Process Light)☆44Updated last month
- Cobalt Strike + Brute Ratel C4 Beacon Object File (BOF) Conversion of the Mockingjay Process Injection Technique☆149Updated last year
- Basic implementation of Cobalt Strikes - User Defined Reflective Loader feature☆100Updated last year
- ☆79Updated last year
- Code snippets to add on top of cobalt strike sleep mask to achieve patchless hook on AMSI and ETW☆82Updated last year
- ☆138Updated last year
- Little program written in C# to bypass EDR hooks and dump the content of the lsass process☆61Updated 3 years ago
- In-memory sleep encryption and heap encryption for Go applications through a shellcode function.☆39Updated last year
- ☆123Updated last year
- Aggressor script add-in for CobaltStrike to track file uploads☆36Updated 2 years ago
- Create Anti-Copy DRM Malware☆52Updated 6 months ago
- Simple LSASS Dumper created using C++ as an alternative to using Mimikatz memory dumper☆53Updated 10 months ago
- Cobalt Strike (CS) Beacon Object File (BOF) foundation for kernel exploitation using CVE-2021-21551.☆80Updated last year
- Tool to start processes as SYSTEM using token duplication☆38Updated 4 years ago
- ☆95Updated last year
- A simple PoC of injection shellcode into a remote process and get the output using namepipe☆42Updated last year
- A simple BOF that frees UDRLs☆115Updated 2 years ago
- I have documented all of the AMSI patches that I learned till now☆74Updated last year
- ☆85Updated last year
- Improved version of EKKO by @5pider that Encrypts only Image Sections☆118Updated 2 years ago
- CSharp reimplementation of Venoma, another C++ Cobalt Strike beacon dropper with custom indirect syscalls execution☆42Updated 9 months ago
- A Cobalt Strike memory evasion loader for redteamers☆97Updated 2 years ago
- ☆151Updated last year