ZephrFish / DynamicMSBuilder

Related projects: ⓘ

• jsecu / ElevatedEvents
  ☆29Updated last year
• EvilGreys / xCommunityKit
  ☆14Updated this week
• EspressoCake / BOF_NativeAPI_Definitions-VSCode
  A VSCode plugin to assist with BOF development.
  ☆29Updated last month
• VoldeSec / BOF-NPPSPY
  Porting of NPPSPY by Grzegorz Tworek to 'man in the middle' the user logon process, and store the user's name and password in an unassumi…
  ☆14Updated last year
• Quack2332 / Simple-.NET-Obfuscator-PoC
  ☆20Updated 3 months ago
• EspressoCake / DefenderPathExclusions
  Creation and removal of Defender path exclusions and exceptions in C#.
  ☆29Updated 10 months ago
• Wh04m1001 / PICDumper
  ☆24Updated 2 years ago
• realoriginal / krbtgs
  old postex for grabbing a krbtgs for my current user
  ☆28Updated last year
• purplededa / CVE-2022-44721-CsFalconUninstaller
  ☆25Updated this week
• MaorSabag / fileSearcher
  A simple BOF (Beacon Object File) to search files in the system
  ☆11Updated 9 months ago
• MrAle98 / Sliver-CPPImplant2
  Sliver agent rewritten in C++
  ☆31Updated 2 weeks ago
• zimnyaa / smbsocks
  A simple rpc2socks alternative in pure Go.
  ☆23Updated 2 months ago
• Hagrid29 / BOF-CredUI
  Cobalt Strike Beacon Object File (BOF) that uses CredUIPromptForWindowsCredentials API to invoke credential prompt
  ☆18Updated last year
• Yair-Men / Passenger
  ProcExp Driver (Ab)use
  ☆20Updated last year
• EspressoCake / ReadRemoteProcessCommandline_BOF
  ☆23Updated 4 months ago
• RCStep / RedTeam_Tools_n_Stuff
  Collection of self-made Red Team tools that have come in handy
  ☆11Updated 3 weeks ago
• Idov31 / NidhoggCSharpApi
  C# API for Nidhogg rootkit
  ☆15Updated 4 months ago
• Cerbersec / pyMetaTwin
  Copy metadata and digital signatures information from one Windows executable to another using Wine on a non-Windows platform
  ☆15Updated 5 months ago
• EvilGreys / XLL-DROPPER-
  ☆28Updated this week
• snovvcrash / BOFs
  Beacon Object Files (not Buffer Overflows)
  ☆51Updated last year
• ASkyeye / CobaltPatch
  Cobalt Strike Malleable Profile Inline Patch Template: A Position Independent Code (PIC) Code Template For Creating Shellcode That Can Be…
  ☆37Updated 4 years ago
• zimawhit3 / DynimicGhostWriting
  Windows x64 Process Injection via Ghostwriting with Dynamic Configuration
  ☆27Updated 2 years ago
• slemire / bof-adopt
  BOF implementation of Adopt. Spawns a process from a process. Can sometimes be used to run a session > 0 process from session 0.
  ☆14Updated 2 years ago
• D1rkMtr / ADSrunner
  ☆22Updated this week
• Allevon412 / BreadManModuleStomping
  ☆38Updated 11 months ago
• CUHKJason / BOF-klist
  A simple BOF implementation of klist using Windows API
  ☆30Updated 2 years ago
• ScriptIdiot / sleepmask_ekko_cfg
  Code snippets to add on top of cobalt strike sleepmask kit so that ekko can work in a CFG protected process
  ☆40Updated last year
• CodeXTF2 / evasion-adventures-files
  Slides and POC demo for my talk at Divizion Zero on EDR evasion titled "Evasion Adventures"
  ☆22Updated last year
• ShellBind / G0T-B0R3D
  ☆17Updated this week
• MrAle98 / BOF-RunPE
  ☆50Updated last year