antroguy / LocklessBof

Related projects: ⓘ

• weaselsec / ClickOnce-AppDomain-Manager-Injection
  Click Once + App Domain
  ☆61Updated 9 months ago
• wotwot563 / aad_prt_bof
  ☆64Updated 5 months ago
• EspressoCake / BOF_Development_Docker
  A VSCode devcontainer for development of COFF files with batteries included.
  ☆47Updated last year
• Leo4j / KeyCredentialLink
  Add Shadow Credentials to a target object by editing their msDS-KeyCredentialLink attribute
  ☆19Updated 3 months ago
• jsecu / BOF-pack-1
  A care package of useful bofs for red team engagments
  ☆47Updated last year
• snovvcrash / BOFs
  Beacon Object Files (not Buffer Overflows)
  ☆51Updated last year
• susMdT / AceLdr
  Cobalt Strike UDRL for memory scanner evasion.
  ☆34Updated 9 months ago
• rkbennett / pybof
  Python module for running BOFs
  ☆63Updated last year
• REDMED-X / InjectKit
  Modified versions of the Cobalt Strike Process Injection Kit
  ☆85Updated 7 months ago
• NVISOsecurity / cs2br-bof
  ☆54Updated last month
• Octoberfest7 / JumpSession_BOF
  Beacon Object File allowing creation of Beacons in different sessions.
  ☆73Updated 2 years ago
• waawaa / AMSI_Rubeus_bypass
  ☆61Updated 2 years ago
• An00bRektn / gopher47
  A third-party Gopher Assassin for the Havoc Framework.
  ☆44Updated 8 months ago
• fin3ss3g0d / IoDllProxyLoad
  DLL proxy load example using the Windows thread pool API, I/O completion callback with named pipes, and C++/assembly
  ☆50Updated 6 months ago
• S4ntiagoP / freeBokuLoader
  A simple BOF that frees UDRLs
  ☆106Updated 2 years ago
• MayerDaniel / profiler-lateral-movement
  Lateral Movement via the .NET Profiler
  ☆74Updated 3 months ago
• gerbsec / SmokeyObfuscator
  Rewrite to fit my needs
  ☆25Updated last month
• OffenseTeacher / Steganim
  ☆47Updated last year
• Hackcraft-Labs / SharpShares
  Multithreaded C# .NET Assembly to enumerate accessible network shares in a domain
  ☆32Updated 10 months ago
• rasta-mouse / PPEnum
  Simple BOF to read the protection level of a process
  ☆101Updated last year
• puzzlepeaches / NTLMRecon
  Enumerate information from NTLM authentication enabled web endpoints 🔎
  ☆34Updated last year
• improsec / CaddyStager
  ☆35Updated 2 years ago
• deh00ni / NtDumpBOF
  ☆79Updated 2 weeks ago
• d4rkiZ / EmbedExeLnk-
  EmbedExeLnk by x86matthew modified by d4rkiZ
  ☆28Updated last year
• ausecwa / bof-registry
  Cobalt Strike beacon object file that allows you to query and make changes to the Windows Registry
  ☆25Updated 3 years ago
• 0xsp-SRD / callback_injection-Csharp
  this repo is to cover the other undocumented or published / in different langaue to achieve shellcode injection via windows callback func…
  ☆81Updated 2 years ago
• caueb / ThreadlessStompingKann
  Combining 3 techniques (Threadless Injection + DLL Stomping + Caro-Kann) together to evade MDE.
  ☆32Updated 8 months ago
• xforcered / BOFMask
  ☆116Updated last year
• trainr3kt / NoteThief
  Grab unsaved Notepad contents with a Beacon Object File
  ☆48Updated 2 years ago
• ChoiSG / OneDriveUpdaterSideloading
  Payload for DLL sideloading of the OneDriveUpdater.exe, based on the PaloAltoNetwork Unit42's blog post
  ☆84Updated last year