Collection of Beacon Object Files (BOFs) that I wrote.
☆43Aug 23, 2026Updated last month
Alternatives and similar repositories for bof_collection
Users that are interested in bof_collection are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- CnaEmulator is a standalone, general-purpose development, emulation, and testing harness for Cobalt Strike Aggressor Scripts (.cna)☆23Sep 20, 2026Updated 3 weeks ago
- Beacon Object File (BOF) implementation of the dnscmd.exe functionality used to obtain remote code execution on an ADIDNS server by explo…☆57Jul 8, 2026Updated 3 months ago
- Repository for various Beacon Object Files (BOFs)☆122Updated this week
- Cobalt Strike BOF that extracts selected Windows registry hives directly from a raw NTFS volume by parsing NTFS metadata and reading file…☆109Oct 11, 2026Updated last week
- Recover NT hashes from NetNTLMv1 responses using local WebGPU computation and local/remote table lookup☆136Oct 7, 2026Updated last week
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- A python proof of concept tool to assist in your payloads classification against EDR/AV's machine learning models☆37Updated this week
- Group3r but in Python☆64Oct 11, 2026Updated last week
- Novel lateral movement and privilege escalation tool leveraging PowerShell named pipes. Allows for executing PowerShell commands over the…☆25Oct 8, 2026Updated last week
- Ask the Web Account Manager (WAM) for Entra ID tokens☆162Sep 11, 2026Updated last month
- A collection of BOF-PE's that allow running tailscale from memory☆142Aug 27, 2026Updated last month
- Automated HTTP/HTTPS simulation for Cobalt Strike Malleable C2 profiles☆28Sep 3, 2026Updated last month
- A collection of techniques for process injection on Windows☆104Aug 16, 2026Updated 2 months ago
- OneDrive as a covert C2 transport for Cobalt Strike☆77Sep 19, 2026Updated 3 weeks ago
- Mythic C2 agent with a full in-memory BOF loader for macOS and Linux☆107Sep 16, 2026Updated last month
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A community maintained repository of Beacon Object Files (BOFs) for red team operations, research, and education. Our goal is to provide …☆33Aug 8, 2026Updated 2 months ago
- File hosting and scripted web delivery service extender for AdaptixC2. Host files over HTTP/HTTPS, generate one-liner payloads across 17 …☆36Aug 24, 2026Updated last month
- A BOF designed to inspect processes memory and addresses☆41Apr 19, 2026Updated 5 months ago
- Custom Adaptix-compatible C2 agent - PIC beacon + Stardust UDRL + Go extender plugins☆144Oct 4, 2026Updated 2 weeks ago
- Cobalt Strike BOF for extracting Firefox passwords and cookies. Decrypts saved credentials using NSS, supports key3.db/key4.db, logins.js…☆42Jul 5, 2026Updated 3 months ago
- ☆37May 19, 2026Updated 4 months ago
- SilentChrome-BOF installs Chromium extension, native messaging, and Isolated Web App profile artifacts☆52Aug 10, 2026Updated 2 months ago
- Extract PRT cookies remotely with InteractiveToken Scheduled Tasks☆34Aug 13, 2026Updated 2 months ago
- Windows x64 API hashing library that bypasses EAF and resolves forwarded exports, ordinals, and api-ms-*/ext-ms-* API Set DLLs.☆63Oct 7, 2026Updated last week
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Pass-the-Passkey Family of Attacks☆233Sep 14, 2026Updated last month
- Open Source implementation of PsPipeJack☆27May 27, 2026Updated 4 months ago
- CVE-2026-24294 PoC☆62Apr 30, 2026Updated 5 months ago
- Authenticode signature manipulation toolkit for Red Team operations and security research. Covers signature stealing, metadata cloning, S…☆140Aug 13, 2026Updated 2 months ago
- ☆92Aug 5, 2026Updated 2 months ago
- ANIMO Azure Network Intel & Mission Ops a C2 based on Azure/Entra assessments☆93Sep 16, 2026Updated last month
- Crystal port of GodPotato to abuse SeImpersonatePrivilege with indirect syscalls, dynamic API resolution and compile-time string obfuscat…☆131Aug 22, 2026Updated last month
- Object file loader implemented as a post-ex DLL for asynchronous BOF execution.☆29Jul 23, 2026Updated 2 months ago
- Modified BloodHound.py CE ingestor for red team use. Obfuscates LDAP through ldapx, paces LDAP searches and host RPC, and resumes a stopp…☆89Oct 10, 2026Updated last week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Dockerized nginx app used to create high-level timeline visuals for red team assessments☆36Feb 25, 2026Updated 7 months ago
- Snaffler in Python☆121Oct 1, 2026Updated 2 weeks ago
- P-BitM is a containerized platform for controlled and weaponized Browser-in-the-Middle☆42Updated this week
- NØW is a word-based shellcode encoding and obfuscation tool that transforms raw shellcode bytes into natural-looking English prose.☆92Jun 24, 2026Updated 3 months ago
- Undetectable offensive toolkit inside Chrome☆146Aug 27, 2026Updated last month
- Attack path mapping for Active Directory, ADCS, SCCM, and MSSQL using BloodHound CE + OpenGraph data.☆246Aug 9, 2026Updated 2 months ago
- Pure-impacket parallel local-admin discovery via RBCD.☆47Oct 9, 2026Updated last week