Repository for various Beacon Object Files (BOFs)
☆185Oct 22, 2026Updated 2 weeks ago
Alternatives and similar repositories for redteam-bofs
Users that are interested in redteam-bofs are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A community maintained repository of Beacon Object Files (BOFs) for red team operations, research, and education. Our goal is to provide …☆34Aug 8, 2026Updated 2 months ago
- A PoC of User-Defined Reflective Loader for Havoc Framework built with Cystal Palace☆49Oct 18, 2026Updated 2 weeks ago
- ☆195Oct 21, 2025Updated last year
- Collection of reversed vulnerable drivers weaponized into process killers. PPL won't save you.☆115Oct 18, 2026Updated 2 weeks ago
- Async BOF to automatically extract or renew Kerberos TGTs on a target system.☆139Jul 23, 2026Updated 3 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- The ADSyncDump BOF is a port of Dirk-Jan Mollema's adconnectdump.py / ADSyncDecrypt into a Beacon Object File (BOF) with zero dependencie…☆183Sep 3, 2025Updated last year
- ☆32Oct 22, 2026Updated 2 weeks ago
- EDR evasion uses stealth injection via SendMessage with WM_SETTEXT to effective bypass EDR (Endpoint Detection and Response)☆77Oct 18, 2026Updated 2 weeks ago
- adws enumeration bof☆176Sep 1, 2026Updated 2 months ago
- Beacon Object File (BOF) to obtain Entra tokens via authcode flow.☆152Jan 17, 2026Updated 9 months ago
- A Beacon Object File suite for Microsoft SQL Server that speaks TDS 7.4 on the wire itself☆103Apr 9, 2026Updated 6 months ago
- An alternative to the builtin clipboard feature in Cobalt Strike that adds the capability to enable/disable and dump the clipboard histor…☆117Apr 16, 2026Updated 6 months ago
- Demonstration of the DLL party process injection technique☆99Oct 1, 2026Updated last month
- Malware as a Service Ludus Range☆142Sep 24, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A collection of DPAPI hunting and parsing BOFs☆39Mar 3, 2026Updated 8 months ago
- A compiled language for Windows position-independent x86-64 shellcode and Beacon Object Files.☆322Jun 28, 2026Updated 4 months ago
- OneDrive as a covert C2 transport for Cobalt Strike☆79Sep 19, 2026Updated last month
- Recover NT hashes from NetNTLMv1 responses using local WebGPU computation and local/remote table lookup☆151Oct 7, 2026Updated 3 weeks ago
- Bof of RegPwn by MDSec☆130Mar 15, 2026Updated 7 months ago
- Async port/ping scanner BOF. Supports IP/port ranges, CIDR notation and hostnames.☆20Jul 23, 2026Updated 3 months ago
- Automatically Download & Compile Useful BOFs for CS☆27Jul 29, 2026Updated 3 months ago
- Beacon Object File (BOF) implementation of the dnscmd.exe functionality used to obtain remote code execution on an ADIDNS server by explo…☆58Jul 8, 2026Updated 3 months ago
- Cobalt Strike BOF used to perform privilege escalation by exploiting the SeImpersonate privilege. Based on the original GodPotato PoC by …☆284Apr 16, 2026Updated 6 months ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Lateral Movement Bof with MSI ODBC Driver Install☆175Sep 30, 2025Updated last year
- Group3r but in Python☆64Oct 11, 2026Updated 3 weeks ago
- Ask the Web Account Manager (WAM) for Entra ID tokens☆167Sep 11, 2026Updated last month
- PIC shellcode agent based on Stardust framework and Crystal Palace☆94Updated this week
- Hidden Desktop Plugin For Havoc C2,Soon coming for Sliver.☆265Sep 29, 2026Updated last month
- InfraGuard is a Command & Control Redirection Proxy and Manager which protects your Red Team Infrastructure against threat attribution☆334Oct 22, 2026Updated 2 weeks ago
- Cobalt Strike BOF that extracts selected Windows registry hives directly from a raw NTFS volume by parsing NTFS metadata and reading file…☆112Oct 11, 2026Updated 3 weeks ago
- A Beacon Object File (BOF) for Cobalt Strike and Mythic C2 that implements COM hijacking for persistence on Windows systems.☆37Feb 17, 2026Updated 8 months ago
- This repo contains the results of an internal re-write of impacket I undertook at my current company. It contains some of the IoCs found …☆360Sep 7, 2026Updated last month
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Python and BOF utilites to the determine EPA enforcement levels of popular NTLM relay targets from the offensive perspective☆197Updated this week
- Beacon Object File (BOF) port of DumpGuard for extracting NTLMv1 hashes from sessions on modern Windows systems.☆223Jan 6, 2026Updated 10 months ago
- Beacon Object File (BOF) to coerce machine account auth via IPP.☆94Updated this week
- Pass-the-Passkey Family of Attacks☆234Sep 14, 2026Updated last month
- Async BOF to monitor and detect clipboard changes on a target system and return the clipboard contents.☆22Jul 23, 2026Updated 3 months ago
- Cobalt Strike Aggressor Script for identifying security products on Windows hosts — six enumeration methods rated by noise level, from si…☆98Feb 6, 2026Updated 9 months ago
- Unauthenticated start EFS service on remote Windows host (make PetitPotam great again)☆153Oct 23, 2025Updated last year