Alternatives and similar repositories for BofRoast

Users that are interested in BofRoast are comparing it to the libraries listed below

• netero1010 / ServiceMove-BOF
  New lateral movement technique by abusing Windows Perception Simulation Service to achieve DLL hijacking code execution.
  ☆294Updated 3 years ago
• cube0x0 / MiniDump
  C# Lsass parser
  ☆295Updated 3 years ago
• ShutdownRepo / ShadowCoerce
  MS-FSRVP coercion abuse PoC
  ☆291Updated 3 years ago
• S3cur3Th1sSh1t / SharpNamedPipePTH
  Pass the Hash to a named pipe for token Impersonation
  ☆302Updated last year
• outflanknl / WdToggle
  A Beacon Object File (BOF) for Cobalt Strike which uses direct system calls to enable WDigest credential caching.
  ☆220Updated 2 years ago
• N4kedTurtle / PersistBOF
  A BOF to automate common persistence tasks for red teamers
  ☆279Updated 2 years ago
• Kevin-Robertson / Sharpmad
  C# version of Powermad
  ☆166Updated last year
• cube0x0 / SharpSystemTriggers
  Collection of remote authentication triggers in C#
  ☆493Updated last year
• outflanknl / HelpColor
  Agressor script that lists available Cobalt Strike beacon commands and colors them based on their type
  ☆207Updated last year
• cube0x0 / ParallelSyscalls
  C# version of MDSec's ParallelSyscalls
  ☆141Updated 3 years ago
• mdsecactivebreach / DragonCastle
  A PoC that combines AutodialDLL lateral movement technique and SSP to scrape NTLM hashes from LSASS process.
  ☆299Updated 2 years ago
• cube0x0 / LdapSignCheck
  Beacon Object File & C# project to check LDAP signing
  ☆192Updated 10 months ago
• Cerbersec / KillDefenderBOF
  Beacon Object File PoC implementation of KillDefender
  ☆227Updated 3 years ago
• Cracked5pider / KaynStrike
  UDRL for CS
  ☆427Updated last year
• ly4k / PassTheChallenge
  Recovering NTLM hashes from Credential Guard
  ☆339Updated 2 years ago
• mlcsec / ASRenum-BOF
  Cobalt Strike BOF that identifies Attack Surface Reduction (ASR) rules, actions, and exclusion locations
  ☆155Updated last year
• Flangvik / CobaltBus
  Cobalt Strike External C2 Integration With Azure Servicebus, C2 traffic via Azure Servicebus
  ☆231Updated 3 years ago
• fortalice / modifyCertTemplate
  ADCS cert template modification and ACL enumeration
  ☆137Updated 2 years ago
• dirkjanm / forest-trust-tools
  Proof-of-concept tools for my AD Forest trust research
  ☆217Updated last year
• boku7 / Ninja_UUID_Runner
  Module Stomping, No New Thread, HellsGate syscaller, UUID Shellcode Runner for x64 Windows 10!
  ☆445Updated 2 years ago
• Luct0r / KerberOPSEC
  OPSEC safe Kerberoasting in C#
  ☆192Updated 3 years ago
• RiccardoAncarani / LiquidSnake
  LiquidSnake is a tool that allows operators to perform fileless lateral movement using WMI Event Subscriptions and GadgetToJScript
  ☆338Updated 3 years ago
• med0x2e / NTLMRelay2Self
  An other No-Fix LPE, NTLMRelay2Self over HTTP (Webdav).
  ☆406Updated last year
• rasta-mouse / CsWhispers
  Source generator to add D/Invoke and indirect syscall methods to a C# project.
  ☆182Updated last year
• Sh0ckFR / InlineWhispers2
  Tool for working with Direct System Calls in Cobalt Strike's Beacon Object Files (BOF) via Syswhispers2
  ☆186Updated 2 years ago
• ly4k / PetitPotam
  Python implementation for PetitPotam
  ☆202Updated 3 years ago
• xforcered / CredBandit
  Proof of concept Beacon Object File (BOF) that uses static x64 syscalls to perform a complete in memory dump of a process and send that b…
  ☆243Updated 3 years ago
• wavvs / nanorobeus
  COFF file (BOF) for managing Kerberos tickets.
  ☆300Updated last year
• CCob / MirrorDump
  Another LSASS dumping tool that uses a dynamically compiled LSA plugin to grab an lsass handle and API hooking for capturing the dump in…
  ☆265Updated 4 years ago
• Mr-Un1k0d3r / ADHuntTool
  official repo for the AdHuntTool (part of the old RedTeamCSharpScripts repo)
  ☆233Updated 3 years ago