Alternatives and similar repositories for run_pe

Users that are interested in run_pe are comparing it to the libraries listed below

• Like0x / SharpBlock

  View on GitHub
  A method of bypassing EDR's active projection DLL's by preventing entry point exection
  ☆24May 10, 2021Updated 4 years ago
• BronzeTicket / ClipboardWindow-Inject

  View on GitHub
  CLIPBRDWNDCLASS process injection technique(BOF) - execute beacon shellcode in callback
  ☆68Sep 15, 2022Updated 3 years ago
• idiotc4t / Reflective-HackBrowserData

  View on GitHub
  HackBrowserData的反射模块
  ☆177Mar 13, 2021Updated 4 years ago
• CrossC2 / autoRebind

  View on GitHub
  Automatically parse Malleable C2 profiled into CrossC2 rebinding library source code
  ☆21Feb 13, 2023Updated 3 years ago
• wafinfo / SyscallLoader

  View on GitHub
  SyscallLoader
  ☆11Sep 13, 2021Updated 4 years ago
• qwqdanchun / Little-CRT

  View on GitHub
  ☆11Sep 30, 2023Updated 2 years ago
• Like0x / AddDefenderExclusions-BOF

  View on GitHub
  AddDefenderExclusions Beacon Object File
  ☆41Jun 25, 2023Updated 2 years ago
• Mr-Un1k0d3r / Elevate-System-Trusted-BOF

  View on GitHub
  ☆160Mar 27, 2023Updated 2 years ago
• SimonZhong2025 / Waste-Self-Rescue-Scheme

  View on GitHub
  废物自救项目！一起向光而行！！！
  ☆11May 7, 2022Updated 3 years ago
• 0x3rhy / AddUser-Bof

  View on GitHub
  Cobalt Strike BOF that Add an admin user
  ☆78Oct 11, 2022Updated 3 years ago
• idiotc4t / ObfuscationStrings-new

  View on GitHub
  ☆32Jul 2, 2020Updated 5 years ago
• Hagrid29 / BOF-SprayAD

  View on GitHub
  Cobalt Strike Beacon Object File (BOF) that uses LogonUserSSPI API to perform kerberos-based password spray
  ☆47Mar 4, 2023Updated 2 years ago
• tijme / cmstplua-uac-bypass

  View on GitHub
  Cobalt Strike Beacon Object File for bypassing UAC via the CMSTPLUA COM interface.
  ☆215Oct 9, 2022Updated 3 years ago
• baiyies / ScreenshotBOFPlus

  View on GitHub
  Take a screenshot without injection for Cobalt Strike
  ☆203Jun 7, 2023Updated 2 years ago
• FalconForceTeam / BOF2shellcode

  View on GitHub
  POC tool to convert CobaltStrike BOF files to raw shellcode
  ☆220Nov 5, 2021Updated 4 years ago
• b0bac / GetMail

  View on GitHub
  利用NTLM Hash读取Exchange邮件
  ☆441Jan 7, 2025Updated last year
• NoOne-hub / Beacon.dll

  View on GitHub
  Beacon.dll reverse
  ☆141Sep 5, 2021Updated 4 years ago
• wilszdev / SchtasksUacBypass

  View on GitHub
  bypass UAC even when configured to always notify user
  ☆29Aug 31, 2021Updated 4 years ago
• paranoidninja / DotNetTracer

  View on GitHub
  C code to enable ETW tracing for Dotnet Assemblies
  ☆32Aug 12, 2022Updated 3 years ago
• Ghost2097221 / selfMimikatz

  View on GitHub
  自不量力的mimikatz分离计划
  ☆44Nov 28, 2021Updated 4 years ago
• CUHKJason / BOF-klist

  View on GitHub
  A simple BOF implementation of klist using Windows API
  ☆32Jul 7, 2022Updated 3 years ago
• knightswd / ProcessGhosting

  View on GitHub
  ☆74Jul 23, 2021Updated 4 years ago
• Octoberfest7 / Mutants_Sessions_Self-Deletion

  View on GitHub
  Writeup of Payload Techniques in C involving Mutants, Session 1 -> Session 0 migration, and Self-Deletion of payloads.
  ☆129Apr 24, 2022Updated 3 years ago
• lwch / crpc

  View on GitHub
  golang rpc框架，支持数据加密传输
  ☆13Jan 19, 2026Updated 3 weeks ago
• carlnykvist / Timestamp_BOF

  View on GitHub
  ☆17Aug 25, 2022Updated 3 years ago
• BambiZombie / bypass_uac_bof

  View on GitHub
  一个普通的BOF用来BypassUAC
  ☆22Apr 6, 2024Updated last year
• RowTeam / SharpBoxUpload

  View on GitHub
  C# 编写的用于 Dropbox 文件上传
  ☆20Jan 16, 2022Updated 4 years ago
• Jumbo-WJB / portreuse

  View on GitHub
  portreuse reuseport 端口复用
  ☆61Aug 27, 2023Updated 2 years ago
• JDArmy / RPCSCAN

  View on GitHub
  RPC远程主机信息匿名扫描工具
  ☆317Sep 30, 2022Updated 3 years ago
• GetRektBoy724 / SharpLoadLibrary

  View on GitHub
  An attempt to make a LoadLibrary designed for offensive operations, in C# obviously.
  ☆55Mar 3, 2022Updated 3 years ago
• dust-life / Free445-BOF

  View on GitHub
  ☆26Apr 24, 2025Updated 9 months ago
• 1ight-2020 / GoRottenTomato

  View on GitHub
  Go实现部分Rubeus功能，可执行asktgt, asktgs, s4u, describe ticket, renew ticket, asreproast等
  ☆142May 5, 2022Updated 3 years ago
• Narumiii / phantommap

  View on GitHub
  Phantom DLL Hollowing method implemented in modmap
  ☆18Jun 9, 2021Updated 4 years ago
• wilszdev / GetTrustedInstallerShell

  View on GitHub
  impersonate trustedinstaller by fiddling with tokens
  ☆17Aug 30, 2021Updated 4 years ago
• alfarom256 / StinkyLoader

  View on GitHub
  It stinks
  ☆105Apr 22, 2022Updated 3 years ago
• XiaoliChan / wmiexec-RegOut

  View on GitHub
  Modify version of impacket wmiexec.py, get output(data,response) from registry, don't need SMB connection, also bypassing antivirus-softw…
  ☆278Apr 4, 2023Updated 2 years ago
• Hagrid29 / DuplicateDump

  View on GitHub
  Dumping LSASS with a duplicated handle from custom LSA plugin
  ☆204Feb 23, 2022Updated 3 years ago
• timwhitez / Doge-SelfDelete

  View on GitHub
  Golang implementation of the research by @jonaslyk and the drafted PoC from @LloydLabs
  ☆26Dec 3, 2021Updated 4 years ago
• EspressoCake / Self_Deletion_BOF

  View on GitHub
  BOF implementation of the research by @jonasLyk and the drafted PoC from @LloydLabs
  ☆187Oct 3, 2021Updated 4 years ago