kyxiaxiang / Beacon_Source
not a reverse-engineered version of the Cobalt Strike Beacon
☆349Updated 10 months ago
Alternatives and similar repositories for Beacon_Source:
Users that are interested in Beacon_Source are comparing it to the libraries listed below
- A beacon object file implementation of PoolParty Process Injection Technique.☆367Updated last year
- PE to shellcode☆167Updated last month
- Dynamically convert an unmanaged EXE or DLL file to PIC shellcode by prepending a shellcode stub.☆287Updated 10 months ago
- CPP AV/EDR Killer☆373Updated last year
- Bypassing UAC with SSPI Datagram Contexts☆427Updated last year
- A list of python tools to help create an OPSEC-safe Cobalt Strike profile.☆398Updated 11 months ago
- ☆238Updated last year
- Some Service DCOM Object and SeImpersonatePrivilege abuse.☆354Updated 2 years ago
- Abuse Impersonate Privilege from Service to SYSTEM like other potatoes do☆370Updated 2 years ago
- Reproducing Spyboy technique, which involves terminating all EDR/XDR/AVs processes by abusing the zam64.sys driver☆256Updated last week
- A Tool that aims to evade av with binary padding☆145Updated 7 months ago
- Process injection alternative☆318Updated 5 months ago
- ☆320Updated last week
- Positional Independent Code to extract clear text password from mstsc.exe using API Hooking via HWBP.☆235Updated 8 months ago
- Some POCs for my BYOVD research and find some vulnerable drivers☆167Updated 5 months ago
- A Windows potato to privesc☆352Updated 5 months ago
- A Beacon Object File (BOF) template for Visual Studio☆162Updated 6 months ago
- ☆96Updated last year
- Leverage a legitimate WFP callout driver to prevent EDR agents from sending telemetry☆379Updated 6 months ago
- C2 redirector base on caddy☆199Updated 8 months ago
- A Visual Studio template used to create Cobalt Strike BOFs☆289Updated 3 years ago
- Terminate AV/EDR Processes using kernel driver☆339Updated last year
- ☆516Updated 11 months ago
- Collection of Beacon Object Files (BOF) for Cobalt Strike☆559Updated 6 months ago
- Open repository for learning dynamic shellcode loading (sample in many programming languages)☆237Updated 3 weeks ago
- windows-rs shellcode loaders☆326Updated 7 months ago
- shellcode loader for your evasion needs☆311Updated 3 months ago
- Yet another C++ Cobalt Strike beacon dropper with Compile-Time API hashing and custom indirect syscalls execution☆166Updated 10 months ago
- A Go implementation of Cobalt Strike style BOF/COFF loaders.☆193Updated 4 months ago
- Credential Guard Bypass Via Patching Wdigest Memory☆314Updated 2 years ago