joaoviictorti / rustbofView external linksLinks
A Rust template for writing Beacon Object Files (BOFs)
☆87Updated this week
Alternatives and similar repositories for rustbof
Users that are interested in rustbof are comparing it to the libraries listed below
Sorting:
- A synergized Visual Studio and Rust development environment☆19Jan 25, 2025Updated last year
- ☆26Aug 11, 2025Updated 6 months ago
- ☆55May 31, 2025Updated 8 months ago
- Beacon Debugger☆55Oct 28, 2024Updated last year
- A rust proof of concept to demonstrate registry overwriting via RegRestoreKey using the Offline Registry Library☆24Nov 13, 2025Updated 3 months ago
- Enable EFS service as low priv user (PE & BOF)☆21Jul 6, 2025Updated 7 months ago
- Cobaltstrike UDRL with memory evasion☆15May 16, 2024Updated last year
- A Rust PoC implementation of the Early Bird process hollowing technique, inspired by https://github.com/boku7/HOLLOW.☆30Feb 7, 2025Updated last year
- Call Stack Spoofing for Rust☆210Jan 28, 2026Updated 2 weeks ago
- A tracker DLL which enables 'NTAPI->Syscall' tracking whenever it is loaded. It calls 'NtSetInformationProcess' API call with a callback …☆14Oct 21, 2024Updated last year
- Just a nice little shellcode loader using unconventional methods to avoid using signatured APIs☆23Jul 11, 2025Updated 7 months ago
- A truly Position Independent Code (PIC) NimPlant C2 beacon written in C, without reflective loading.☆66Feb 11, 2025Updated last year
- BOF with Synthetic Stackframe☆220Oct 30, 2025Updated 3 months ago
- 64-bit, position-independent implant template for Windows in Rust.☆172Nov 28, 2025Updated 2 months ago
- [EMNLP 2024] Holistic Automated Red Teaming for Large Language Models through Top-Down Test Case Generation and Multi-turn Interaction☆17Nov 9, 2024Updated last year
- Proof of Concept (PoC) implant for creating custom Cobalt Strike Beacons☆94Updated this week
- NSecSoftBYOVD POC☆55Updated this week
- Remote BOF Runner is a Havoc extension framework for remote execution of Beacon Object Files (BOFs) using a PIC loader made with Crystal …☆88Jan 2, 2026Updated last month
- A Rust port of LayeredSyscall — performs indirect syscalls while generating legitimate API call stack frames by abusing VEH.☆161Oct 31, 2024Updated last year
- Utilizng an MCP Server to communicate with your C2☆86May 15, 2025Updated 8 months ago
- A remote process injection using process snapshotting based on https://gitlab.com/ORCA000/snaploader , in rust. It creates a sacrificial …☆50Jan 25, 2025Updated last year
- BOF that finds all the Nt* system call stubs within NTDLL and overwrites with clean syscall stubs (user land hook evasion)☆195Feb 6, 2025Updated last year
- A collection of position independent coding resources☆107Nov 15, 2025Updated 3 months ago
- a demo module for the kaine agent to execute and inject assembly modules☆41Aug 28, 2024Updated last year
- use python on windows with full submodule support without installation☆30Jan 23, 2025Updated last year
- ☆20Jan 14, 2026Updated last month
- A C# tool for extracting information from SCCM PXE boot media.☆45Jan 14, 2026Updated last month
- Slides for COM Hijacking AV/EDR Talk on 38c3☆74Jan 3, 2025Updated last year
- C++ Staged Shellcode Loader with Evasion capabilities.☆97Oct 7, 2024Updated last year
- An x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution☆194Nov 27, 2024Updated last year
- Linker for Beacon Object Files☆149Feb 8, 2026Updated last week
- havoc kaine plugin to mitigate PAGE_GUARD protected image headers using JOP gadgets☆42Aug 6, 2024Updated last year
- Cobalt Strike UDC2 implementation that provides an Slack C2 channel☆60Jan 5, 2026Updated last month
- Early cascade injection PoC based on Outflanks blog post written in Rust☆67Dec 26, 2025Updated last month
- Test AMSI Provider implementation in C#☆42Dec 18, 2024Updated last year
- An alternative to the builtin clipboard feature in Cobalt Strike that adds the capability to enable/disable and dump the clipboard histor…☆102Jan 9, 2026Updated last month
- converts sRDI compatible dlls to shellcode☆35Jan 20, 2025Updated last year
- Alternative Read and Write primitives using Rtl* functions the unintended way.☆78Aug 25, 2025Updated 5 months ago
- Rust template/library for implementing your own COFF loader☆71Jan 27, 2025Updated last year