Collection of Beacon Object Files (BOF) for Cobalt Strike
☆185Dec 5, 2022Updated 3 years ago
Alternatives and similar repositories for bof-collection
Users that are interested in bof-collection are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Cobalt Strike BOF for quser.exe implementation using Windows API☆88Mar 22, 2023Updated 3 years ago
- DLL Exports Extraction BOF with optional NTFS transactions.☆93Nov 5, 2021Updated 4 years ago
- Cobalt Strike BOF that identifies Attack Surface Reduction (ASR) rules, actions, and exclusion locations☆167Mar 1, 2024Updated 2 years ago
- A Cobalt Strike Beacon Object File (BOF) project which uses direct system calls to enumerate processes for specific loaded modules or pro…☆274May 3, 2023Updated 3 years ago
- Proof of concept Beacon Object File (BOF) that uses static x64 syscalls to perform a complete in memory dump of a process and send that b…☆219Jul 14, 2021Updated 5 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Beacon Object File implementation of Event Viewer deserialization UAC bypass☆133May 6, 2022Updated 4 years ago
- Cobalt Strike Beacon Object Files☆167May 2, 2022Updated 4 years ago
- Collection of Beacon Object Files (BOFs) for shells and lols☆124Sep 14, 2021Updated 4 years ago
- Collection of Beacon Object Files☆639Nov 1, 2022Updated 3 years ago
- CobaltWhispers is an aggressor script that utilizes a collection of Beacon Object Files (BOF) for Cobalt Strike to perform process inject…☆240Jan 4, 2023Updated 3 years ago
- Beacon Object File (BOF) Creation Helper☆238May 3, 2022Updated 4 years ago
- Remote operations commands implemented using Beacon Object Files☆1,174Jul 20, 2026Updated last week
- An alternative screenshot capability for Cobalt Strike that uses WinAPI and does not perform a fork & run. Screenshot downloaded in memor…☆501Updated this week
- tgtdelegation is a Beacon Object File (BOF) to obtain a usable TGT via the "TGT delegation trick"☆179Nov 26, 2021Updated 4 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Beacon Object File PoC implementation of KillDefender☆236Apr 12, 2022Updated 4 years ago
- Remove API hooks from a Beacon process.☆284Sep 18, 2021Updated 4 years ago
- Collection of beacon BOF written to learn windows and cobaltstrike☆363Feb 24, 2023Updated 3 years ago
- Script to use SysWhispers2 direct system calls from Cobalt Strike BOFs☆125May 24, 2022Updated 4 years ago
- A Beacon Object File (BOF) for Cobalt Strike which uses direct system calls to enable WDigest credential caching.☆219May 3, 2023Updated 3 years ago
- In-memory token vault BOF for Cobalt Strike☆151Aug 18, 2022Updated 3 years ago
- A BOF to automate common persistence tasks for red teamers☆299Mar 7, 2023Updated 3 years ago
- A faithful transposition of the key features/functionality of @itm4n's PPLDump project as a BOF.☆142Sep 24, 2021Updated 4 years ago
- A BOF to determine Windows Defender exclusions.☆256Jun 25, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Collection of beacon object files for use with Cobalt Strike to facilitate 🐚.☆188Feb 11, 2021Updated 5 years ago
- Tool for working with Direct System Calls in Cobalt Strike's Beacon Object Files (BOF) via Syswhispers2☆187Jul 21, 2022Updated 4 years ago
- ☆93May 14, 2022Updated 4 years ago
- Cobalt Strike Beacon Object File (BOF) that uses handwritten shellcode to return the process Environment strings without touching any DLL…☆186Mar 13, 2023Updated 3 years ago
- Beacon Object File (BOF) for remote process injection via thread hijacking☆225Jan 13, 2021Updated 5 years ago
- Creating a repository with all public Beacon Object Files (BoFs)☆663Mar 2, 2026Updated 4 months ago
- C or BOF file to extract WebKit master key to decrypt user cookie☆210Apr 29, 2024Updated 2 years ago
- Execute unmanaged Windows executables in CobaltStrike Beacons☆722Mar 4, 2023Updated 3 years ago
- A Visual Studio template used to create Cobalt Strike BOFs☆324Nov 17, 2021Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A BOF to interact with COM objects associated with the Windows software firewall.☆114Oct 10, 2021Updated 4 years ago
- ☆146May 17, 2023Updated 3 years ago
- A BOF for enumerating version information for DLLs associated for a Beacon process.☆16Nov 23, 2021Updated 4 years ago
- BOF implementation of the research by @jonasLyk and the drafted PoC from @LloydLabs☆187Oct 3, 2021Updated 4 years ago
- COFF file (BOF) for managing Kerberos tickets.☆328Jul 2, 2023Updated 3 years ago
- Cobalt Strike User-Defined Reflective Loader with AV/EDR Evasion in mind☆492Jul 12, 2023Updated 3 years ago
- Various Cobalt Strike BOFs☆781Oct 16, 2022Updated 3 years ago