A detailed list of potentially dangerous file extensions
☆18Jun 18, 2025Updated last year
Alternatives and similar repositories for badfiles
Users that are interested in badfiles are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Red Teaming utilities that I can open source. Used in various tests and CTFS☆12Aug 19, 2024Updated 2 years ago
- Windows Application Attack Surface Analyzer☆27Feb 22, 2024Updated 2 years ago
- Cobalt Strike Beacon Object File to to change the user's desktop wallpaper☆18Sep 15, 2023Updated 3 years ago
- Beacon Object Files used for Cobalt Strike☆19Jul 18, 2023Updated 3 years ago
- A tool that supports finding and abusing whitelisted programs to allow arbitrary file writing into the executable folder of Antivirus sof…☆95May 3, 2026Updated 5 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Cobalt Strike Beacon Object File to enable the webdav client service on x64 windows hosts☆27Sep 15, 2023Updated 3 years ago
- Process hollowing injection technique for Red Team operations☆19Sep 18, 2023Updated 3 years ago
- Info related to the Outflank training: Microsoft Office Offensive Tradecraft☆52May 16, 2024Updated 2 years ago
- ☆14Oct 1, 2025Updated last year
- ADSIsearch is a Beacon Object File (BOF) to query Active Directory using ADDS, ADSI, and Network Management WinAPIs.☆10Feb 23, 2025Updated last year
- DFSCoerce exe revisited version with custom authentication☆43Jan 13, 2024Updated 2 years ago
- AI fun☆27Feb 27, 2025Updated last year
- Unbind port 445/tcp on Windows☆14Jul 11, 2025Updated last year
- Repository to gather the BOF files I will be developing☆12Oct 1, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Kaburra is a project that supports demo attack phase in Social Engineering Awareness training.☆15Oct 5, 2024Updated 2 years ago
- Interactive documentation and visual reference for binary formats and system memory layouts.☆15Jul 13, 2026Updated 3 months ago
- A PoC weaponising CustomXMLPart for hiding malware code inside of Office document structures.☆38Aug 8, 2022Updated 4 years ago
- BOF implementation of Adopt. Spawns a process from a process. Can sometimes be used to run a session > 0 process from session 0.☆16Jul 22, 2022Updated 4 years ago
- ☆23Oct 15, 2024Updated 2 years ago
- This is an advanced Windows loader framework designed for stealthy code injection, anti-analysis, and evasion. It combines direct system …☆14Aug 6, 2025Updated last year
- My KnockKnock Enumeration Tool in Go☆12Dec 15, 2025Updated 10 months ago
- This is a ui library for executors☆11Feb 7, 2026Updated 8 months ago
- Beacon Object file set service sd☆11Mar 6, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Detect userland hooks placed by AV/EDR☆28Sep 4, 2023Updated 3 years ago
- GeoWordlists is a tool to generate wordlists of passwords containing cities at a defined distance around the client city.☆12Nov 24, 2023Updated 2 years ago
- Test bench lab for Shellcode Obfuscation☆38Sep 2, 2025Updated last year
- .NET process monitor that hooks CLR at the native layer, dumps reflective assemblies from memory, and checks AMSI/ETW integrity vs on dis…☆41Oct 11, 2026Updated 2 weeks ago
- Application-scoped Windows network brownouts in native C and BOF form☆22Aug 18, 2026Updated 2 months ago
- pereprava is a minimal http/https redirector and reverse proxy for red team ops.☆17Oct 16, 2025Updated last year
- GitHub action to run Threagile, the agile threat modeling toolkit, on a repo's threagile.yaml file☆14May 3, 2024Updated 2 years ago
- ☆21Jun 21, 2022Updated 4 years ago
- This repository contains list of unwanted or suspicious file extensions in Windows environment.☆11Oct 6, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- VisualStudio port of https://github.com/guervild/BOFs/tree/dev/SilentLsassDump☆23Jul 6, 2023Updated 3 years ago
- The project is called GreatSCT (Great Scott). GreatSCT is an open source project to generate application white list bypasses. This tool i…☆29May 5, 2018Updated 8 years ago
- lnk_parser is a full rust implementation to parse windows LNK files☆25Feb 17, 2026Updated 8 months ago
- a simple powershell wrapper to automate checking a user's access around the network☆14Dec 5, 2023Updated 2 years ago
- GetSystem-LCI is a PowerShell script to escalate privileges from Administrator to NT AUTHORITY\SYSTEM by abusing LanguageComponentsInstal…☆35Nov 24, 2024Updated last year
- ☆24Oct 21, 2025Updated last year
- A small set of Beacon Object Files (BOFs) that I developed over the time with a Magic: The Gathering theme.☆22Jul 15, 2025Updated last year