dmcxblue / SharpGhostTaskLinks
A C# port from Invoke-GhostTask
☆119Updated 2 years ago
Alternatives and similar repositories for SharpGhostTask
Users that are interested in SharpGhostTask are comparing it to the libraries listed below
Sorting:
- ☆84Updated 2 years ago
- Cobalt Strike + Brute Ratel C4 Beacon Object File (BOF) Conversion of the Mockingjay Process Injection Technique☆156Updated 2 years ago
- Modified versions of the Cobalt Strike Process Injection Kit☆105Updated last year
- Tool to bypass LSA Protection (aka Protected Process Light)☆64Updated last year
- ☆92Updated last year
- Alternative Shellcode Execution Via Callbacks in C# with P/Invoke☆85Updated 2 years ago
- Execute commands in other Sessions☆91Updated last year
- Abuse leaked token handles.☆134Updated 2 years ago
- To audit the security of read-only domain controllers☆118Updated 2 years ago
- Identify common EDR processes, directories, and services. Simple BOF of Invoke-EDRChecker.☆127Updated last year
- Terminate AV/EDR leveraging BYOVD attack☆101Updated 9 months ago
- In-memory sleep encryption and heap encryption for Go applications through a shellcode function.☆39Updated last year
- ☆100Updated last year
- ☆93Updated 2 years ago
- Beacon Object File for Cobalt Strike that executes .NET assemblies in beacon with evasion techniques.☆168Updated 3 weeks ago
- Curated list of public Beacon Object Files(BOFs) build in as submodules for easy cloning☆137Updated last month
- Attempting to Hook LSASS APIs to Retrieve Plaintext Credentials☆54Updated 8 months ago
- ☆129Updated 2 years ago
- ☆73Updated last year
- ☆102Updated 2 years ago
- Library of BOFs to interact with SQL servers☆216Updated last month
- ☆144Updated 2 years ago
- Beacon Object Files (BOFs) for Cobalt Strike and Havoc C2. Implementations of Active Directory attacks and post-exploitation techniques.☆94Updated 3 weeks ago
- a C# implementation for a shellcode loader that capable to bypass Cortex XDR and Sophos EDR.☆89Updated 7 months ago
- A BOF that's a BOF Loader☆157Updated last month
- Webcam capture capability for Cobalt Strike as a BOF, with in-memory download options☆154Updated 9 months ago
- ☆108Updated 10 months ago
- A BOF to enumerate system process, their protection levels, and more.☆123Updated last year
- Cobalt Strike BOF for beacon/shellcode injection using fork & run technique with Draugr synthetic stack frames☆145Updated last month
- BadExclusionsNWBO is an evolution from BadExclusions to identify folder custom or undocumented exclusions on AV/EDR☆75Updated last year