Alternatives and similar repositories for QoL-BOFs:

Users that are interested in QoL-BOFs are comparing it to the libraries listed below

• logangoins / Stifle
  .NET Post-Exploitation Utility for Abusing Explicit Certificate Mappings in ADCS
  ☆140Updated 2 months ago
• CodeXTF2 / WebcamBOF
  Webcam capture capability for Cobalt Strike as a BOF, with in-memory download options
  ☆136Updated last month
• kozmer / aad-bofs
  AzureAD beacon object files
  ☆117Updated 4 months ago
• dmcxblue / SharpGhostTask
  A C# port from Invoke-GhostTask
  ☆114Updated last year
• mlcsec / EDRenum-BOF
  Identify common EDR processes, directories, and services. Simple BOF of Invoke-EDRChecker.
  ☆120Updated 6 months ago
• FalconForceTeam / bof-winrm-client
  ☆108Updated 3 months ago
• Tw1sm / SQL-BOF
  Library of BOFs to interact with SQL servers
  ☆163Updated 2 weeks ago
• ewby / Mockingjay_BOF
  Cobalt Strike + Brute Ratel C4 Beacon Object File (BOF) Conversion of the Mockingjay Process Injection Technique
  ☆151Updated last year
• rasta-mouse / SpawnWith
  ☆106Updated 2 months ago
• cybersectroll / SharpPersistSD
  ☆87Updated 11 months ago
• Meowmycks / koneko
  Robust Cobalt Strike shellcode loader with multiple advanced evasion features
  ☆123Updated last week
• MythicAgents / Xenon
  A Mythic agent for Windows written in C
  ☆119Updated this week
• xpn / CloudInject
  ☆110Updated 5 months ago
• Octoberfest7 / enumhandles_BOF
  ☆125Updated 7 months ago
• tdeerenberg / InlineWhispers3
  Tool for working with Indirect System Calls in Cobalt Strike's Beacon Object Files (BOF) using SysWhispers3 for EDR evasion
  ☆76Updated 2 weeks ago
• deh00ni / NtDumpBOF
  ☆97Updated 7 months ago
• gsmith257-cyber / better-sliver
  Adversary Emulation Framework
  ☆98Updated 9 months ago
• Cipher7 / ApexLdr
  ApexLdr is a DLL Payload Loader written in C
  ☆108Updated 9 months ago
• som3canadian / Cloudflare-Redirector
  Just another C2 Redirector using CloudFlare. Support multiple C2 and multiple domains. Support for websocket listener.
  ☆155Updated last month
• Leo4j / SessionExec
  Execute commands in other Sessions
  ☆86Updated 8 months ago
• Octoberfest7 / Enumprotections_BOF
  A BOF to enumerate system process, their protection levels, and more.
  ☆115Updated 4 months ago
• mertdas / SharpLateral
  Lateral Movement
  ☆122Updated last year
• NtDallas / OdinLdr
  Cobaltstrike Reflective Loader with Synthetic Stackframe
  ☆114Updated 2 months ago
• rasta-mouse / process-inject-kit
  Port of Cobalt Strike's Process Inject Kit
  ☆173Updated 4 months ago
• boku7 / patchwerk
  BOF that finds all the Nt* system call stubs within NTDLL and overwrites with clean syscall stubs (user land hook evasion)
  ☆177Updated 2 months ago
• Offensive-Panda / LsassReflectDumping
  This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone…
  ☆198Updated 6 months ago
• racoten / BetterNetLoader
  A version of NetLoader, Execute Assemblies and Bypass ETW and AMSI using Hardware Breakpoints
  ☆86Updated 3 months ago
• t94j0 / adexplorersnapshot-rs
  ☆80Updated 8 months ago
• Macmod / ldapx
  Flexible LDAP proxy that can be used to inspect & transform all LDAP packets generated by other tools on the fly.
  ☆111Updated 4 months ago
• decoder-it / ADCSCoercePotato
  ☆224Updated 11 months ago