loland / inlineExecuteLinks
Cobalt Strike BOF
☆42Updated last month
Alternatives and similar repositories for inlineExecute
Users that are interested in inlineExecute are comparing it to the libraries listed below
Sorting:
- ☆51Updated 7 months ago
- Local SYSTEM auth trigger for relaying - X☆155Updated 6 months ago
- TokenCert☆102Updated last year
- Random BOFs for LDAP tradecraft☆72Updated 4 months ago
- Cobalt Strike UDRL for memory scanner evasion.☆52Updated 2 years ago
- ☆47Updated 2 months ago
- ☆37Updated last year
- RPC to WebClient startup☆54Updated 5 months ago
- Click Once + App Domain☆64Updated 2 years ago
- ClickForClickOnce - Generate configurable clickonce payloads☆88Updated 3 months ago
- a small script to collect information from a management point☆36Updated 2 weeks ago
- BOF template with boflink and mutator kit support☆48Updated 3 weeks ago
- A BOF that suspends non-GUI threads for a target process or resumes them resulting in stealthy process silencing.☆57Updated 9 months ago
- adws enumeration bof☆161Updated 4 months ago
- Lockless BOF☆79Updated 9 months ago
- Rewrite to fit my needs☆32Updated last year
- ☆50Updated 8 months ago
- ☆26Updated 6 months ago
- ☆57Updated 11 months ago
- PoC script to demonstrate collection of SCCM attack paths that can be viewed in BH with OpenGraph☆24Updated 6 months ago
- Library of BOFs to interact with SQL servers☆16Updated last year
- Dump LSASS by spoofing command line arguments to procdump.☆20Updated last year
- Copy metadata and digital signatures information from one Windows executable to another using Wine on a non-Windows platform☆19Updated last year
- ☆38Updated 11 months ago
- Remote BOF Runner is a Havoc extension framework for remote execution of Beacon Object Files (BOFs) using a PIC loader made with Crystal …☆88Updated last month
- Beacon Object File (BOF) for identifying dependent child services of a given parent.☆18Updated 7 months ago
- Spawns a process from a process. Can sometimes be used to run a session > 0 process from session 0.☆20Updated 3 years ago
- ☆35Updated last year
- PowerShell Implementation of ADFSDump to assist with GoldenSAML☆38Updated 2 months ago
- SharpExShell automates the DCOM lateral movment technique which abuses ActivateMicrosoftApp method of Excel application.☆75Updated last year