ASPX Web Shell with COFF Loader
☆133Mar 10, 2026Updated 3 months ago
Alternatives and similar repositories for ASPX_WebShell_COFFLoader
Users that are interested in ASPX_WebShell_COFFLoader are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Async BOF implementation of 'Rubeus monitor' to detect and automatically extract Kerberos TGTs as they appear on a target system.☆130Updated this week
- Notion C2 Profile for Mythic☆46Apr 30, 2026Updated 2 months ago
- Reflective PE loader written in Zig. Loads and executes native and .NET PE files directly from memory.☆65Mar 2, 2026Updated 4 months ago
- Cobalt Strike UDC2 implementation that provides an Slack C2 channel☆69Jan 5, 2026Updated 6 months ago
- PoC for generating bthprops.cpl module designed to be loaded by Fsquirt.exe LOLBin☆122Jan 4, 2026Updated 6 months ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- A Cobalt Strike RL built with Crystal Palac; module overloading, NtContinue entry transfer, call stack spoofing, sleep masking, and stati…☆223Mar 15, 2026Updated 3 months ago
- ☆45Apr 13, 2026Updated 2 months ago
- This is a Sharp assembly loader in PowerShell☆16Jun 17, 2026Updated 3 weeks ago
- A Beacon Object File (BOF) that talks directly to Windows authentication packages through the LSA untrusted/trusted client interface, wit…☆296Feb 21, 2026Updated 4 months ago
- Bring your own Unwind Data Framework☆153Mar 15, 2026Updated 3 months ago
- Native C++ access to Active Directory over ADWS, no .NET, no WCF, no HTTP stack.☆80Mar 27, 2026Updated 3 months ago
- Using Just In Time (JIT) instruction decryption, this shellcode loader ensures that only the currently executing instruction is visible i…☆66Apr 2, 2025Updated last year
- BOF to impersonate TrustedInstaller via DISM API trigger and thread impersonation☆131Mar 27, 2026Updated 3 months ago
- Cobaltstrike UDRL with memory evasion☆15May 16, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A Ligolo-ng JavaScript agent working inside Chrome & Chromium-based browsers by leveraging Isolated Web Applications.☆131Mar 30, 2026Updated 3 months ago
- Beacon Object File (BOF) for Using the BadSuccessor Technique for Account Takeover☆90Oct 20, 2025Updated 8 months ago
- A Crystal Palace shared library to resolve & perform syscalls☆62Oct 29, 2025Updated 8 months ago
- Self Cleanup in post-ex job☆59Sep 10, 2024Updated last year
- adws enumeration bof☆173Feb 16, 2026Updated 4 months ago
- ☆239Mar 13, 2026Updated 3 months ago
- Overview of MS Defender☆151Feb 20, 2026Updated 4 months ago
- ☆57Jun 28, 2025Updated last year
- A Beacon Object File suite for Microsoft SQL Server that speaks TDS 7.4 on the wire itself☆98Apr 9, 2026Updated 2 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Parses cached certificate templates from a Windows Registry file and displays them in the same style as Certipy does☆96Jul 3, 2025Updated last year
- Run native PE or .NET executables entirely in-memory. Build the loader as an .exe or .dll—DllMain is Cobalt Strike UDRL-compatible☆272Jun 18, 2025Updated last year
- Local SYSTEM auth trigger for relaying - X☆158Jul 23, 2025Updated 11 months ago
- Python and BOF utilites to the determine EPA enforcement levels of popular NTLM relay targets from the offensive perspective☆180May 31, 2026Updated last month
- Evasion kit for Cobalt Strike☆30Jan 16, 2026Updated 5 months ago
- Probably the easiest way to setup new beacon notifications in Cobalt Strike☆10Jan 7, 2022Updated 4 years ago
- An example of how a driver can register a handle creation callback.☆16Jun 12, 2023Updated 3 years ago
- Use the Netlogon Remote Protocol (MS-NRPC) to dump the target hash.☆62Feb 25, 2025Updated last year
- Set of PoC to abuse Windows minifilters functionality☆92May 1, 2026Updated 2 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆149Nov 6, 2025Updated 8 months ago
- ☆86Apr 8, 2026Updated 3 months ago
- ☆55May 31, 2025Updated last year
- ☆49Apr 9, 2025Updated last year
- SamrSearch can get user info and group info with MS-SAMR.☆15Feb 15, 2022Updated 4 years ago
- A C# tool for requesting certificates from ADCS using DCOM over SMB. This tool allows you to remotely request X.509 certificates from CA …☆169Nov 2, 2025Updated 8 months ago
- Azure apim mini proxy☆60May 18, 2026Updated last month