A Beacon Object File (BOF) for Cobalt Strike and Mythic C2 that implements COM hijacking for persistence on Windows systems.
☆37Feb 17, 2026Updated 8 months ago
Alternatives and similar repositories for COM_Hijack_BOF
Users that are interested in COM_Hijack_BOF are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A PoC of User-Defined Reflective Loader for Havoc Framework built with Cystal Palace☆44Updated this week
- ☆19Mar 19, 2026Updated 7 months ago
- Application-scoped Windows network brownouts in native C and BOF form☆22Aug 18, 2026Updated 2 months ago
- ☆39Aug 13, 2026Updated 2 months ago
- Sophisticated In-Memory PE loader for Cobalt Strike☆24Jan 24, 2026Updated 9 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- BOF and research notes from hunting execution paths, covering Shell.HWEventHandlerShellExecute COM execution through the AutoPlay IHWEven…☆39Jun 20, 2026Updated 4 months ago
- A CET-compatible Windows x64 loader that produces fully backed call stacks through runtime function table manipulation, code cave injecti…☆134Sep 6, 2026Updated last month
- example use of defining your own injection technique for explicit injection and or spawn (fork & run)☆19Jan 3, 2026Updated 9 months ago
- Kassandra is a custom Mythic C2 agent written in Rust, containerized via a Python-based builder☆24Jul 31, 2026Updated 2 months ago
- 绕过PPL dump lsass内存☆30Jul 6, 2026Updated 3 months ago
- A Proof of Concept demonstrating CET-compliant callstack spoofing in Rust. It leverages Windows Thread Pool and Enum Callback trampolinin…☆71Jul 12, 2026Updated 3 months ago
- PIC shellcode agent based on Stardust framework and Crystal Palace☆90Oct 4, 2026Updated 2 weeks ago
- DynLoader A modular Windows loader focused on EDR evasion Built with indirect syscall (Tartarus Gate / Hell’s Gate), Manual PE parsing …☆82Jul 10, 2026Updated 3 months ago
- ☆72Jul 12, 2026Updated 3 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Generate proxy DLLs for sideloading and hijacking research. Mirrors exports, embeds originals, runs payloads.☆17Jun 16, 2026Updated 4 months ago
- Precision call-stack spoofing gadget hunter for x64 DLLs, powered by Iced disassembler☆20Jul 2, 2026Updated 3 months ago
- EDR evasion uses stealth injection via SendMessage with WM_SETTEXT to effective bypass EDR (Endpoint Detection and Response)☆67Oct 18, 2026Updated last week
- ☆37May 19, 2026Updated 5 months ago
- Research on a new PoC for a Windows Sandbox .wsb HostFolder UNC path primitive that causes the host to authenticate over SMB and leak Net…☆32Jun 21, 2026Updated 4 months ago
- Repository for various Beacon Object Files (BOFs)☆130Updated this week
- NØW is a word-based shellcode encoding and obfuscation tool that transforms raw shellcode bytes into natural-looking English prose.☆91Jun 24, 2026Updated 4 months ago
- Adaptix C2 extender to support Cobalt Strike Malleable C2 profiles☆54Jun 28, 2026Updated 3 months ago
- IrisC2 is A modular C2 framework for authorized security research, featuring Iris Client, Server, Beacon, stager templates, payload gener…☆30Updated this week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Cobalt Strike Aggressor Script for identifying security products on Windows hosts — six enumeration methods rated by noise level, from si…☆96Feb 6, 2026Updated 8 months ago
- Debugger utilizing stealth hooks to hide from debugger detection☆26Aug 22, 2026Updated 2 months ago
- Mythic Peer to Peer (P2P) Communication Protocol via. LLDP☆23Aug 20, 2026Updated 2 months ago
- An example UDC2 implementation for CrystalC2.☆19Jun 19, 2026Updated 4 months ago
- A foundational C library for building operationally credible offensive capabilities☆94Sep 21, 2026Updated last month
- In-memory BOF implementation of Silent Process Exit LSASS dump via RtlReportSilentProcessExit☆19Apr 14, 2026Updated 6 months ago
- Local Windows credential extraction☆25Jul 14, 2026Updated 3 months ago
- Beacon Object File (BOF) Template☆98Oct 14, 2026Updated last week
- can convert EXE/DLL into position-independent shellcode☆67Sep 14, 2026Updated last month
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- Windows Kernel-Mode Shellcode Development Framework (WKMSDF)☆90Aug 1, 2026Updated 2 months ago
- BOF POC of the DSCourier project / invoking WinGet via COM☆90Apr 23, 2026Updated 6 months ago
- Tunneling tool for red teaming, designed to run in memory on a windows target and connect back to a Linux VPS so you can proxy tools into…☆54Aug 3, 2026Updated 2 months ago
- Cloud dead-drop C2 framework — RSA-4096 + AES-256-GCM, 5 cloud providers, Rust-only agents, P2P mesh, persistence engine, credential harv…☆45Updated this week
- Security-first AI-native C5 teamserver (Command · Control · Cognitive · Collaborative · Coordination) for authorized red team & pentest. …☆57Updated this week
- A Cobalt Strike RL built with Crystal Palac; module overloading, NtContinue entry transfer, call stack spoofing, sleep masking, and stati…☆263Mar 15, 2026Updated 7 months ago
- Clean Indirect Syscalls with Syscall Tampering.☆43Updated this week