cube0x0 / BofRoast
Beacon Object Files for roasting Active Directory
☆223Updated 3 years ago
Alternatives and similar repositories for BofRoast:
Users that are interested in BofRoast are comparing it to the libraries listed below
- New lateral movement technique by abusing Windows Perception Simulation Service to achieve DLL hijacking code execution.☆289Updated 3 years ago
- Agressor script that lists available Cobalt Strike beacon commands and colors them based on their type☆199Updated 11 months ago
- C# Lsass parser☆284Updated 3 years ago
- A BOF to automate common persistence tasks for red teamers☆273Updated 2 years ago
- A Beacon Object File (BOF) for Cobalt Strike which uses direct system calls to enable WDigest credential caching.☆215Updated last year
- UDRL for CS☆420Updated last year
- A PoC that combines AutodialDLL lateral movement technique and SSP to scrape NTLM hashes from LSASS process.☆296Updated 2 years ago
- Module Stomping, No New Thread, HellsGate syscaller, UUID Shellcode Runner for x64 Windows 10!☆439Updated 2 years ago
- Collection of remote authentication triggers in C#☆475Updated 10 months ago
- Cobalt Strike External C2 Integration With Azure Servicebus, C2 traffic via Azure Servicebus☆226Updated 3 years ago
- C# version of MDSec's ParallelSyscalls☆139Updated 3 years ago
- Python tool to Check running WebClient services on multiple targets based on @leechristensen☆269Updated 3 years ago
- MS-FSRVP coercion abuse PoC☆286Updated 3 years ago
- ADCS cert template modification and ACL enumeration☆135Updated last year
- InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assem…☆187Updated 3 years ago
- Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel☆320Updated last year
- Pass the Hash to a named pipe for token Impersonation☆301Updated last year
- Beacon Object File & C# project to check LDAP signing☆184Updated 7 months ago
- Cobalt Strike User-Defined Reflective Loader with AV/EDR Evasion in mind☆443Updated last year
- Koppeling x Metatwin x LazySign☆208Updated 3 years ago
- Proof of concept Beacon Object File (BOF) that uses static x64 syscalls to perform a complete in memory dump of a process and send that b…☆239Updated 3 years ago
- Beacon Object File PoC implementation of KillDefender☆219Updated 2 years ago
- COFF file (BOF) for managing Kerberos tickets.☆291Updated last year
- C# version of Powermad☆160Updated last year
- Patch AMSI and ETW☆237Updated 10 months ago
- Useful Cobalt Strike BOFs found or used during engagements☆138Updated last year
- LiquidSnake is a tool that allows operators to perform fileless lateral movement using WMI Event Subscriptions and GadgetToJScript☆329Updated 3 years ago
- Remove API hooks from a Beacon process.☆268Updated 3 years ago
- This are different types of download cradles which should be an inspiration to play and create new download cradles to bypass AV/EPP/EDR …☆257Updated 2 years ago
- A BOF to determine Windows Defender exclusions.☆243Updated last year