Alternatives and similar repositories for ServiceMove-BOF:

Users that are interested in ServiceMove-BOF are comparing it to the libraries listed below

• Cracked5pider / KaynStrike
  UDRL for CS
  ☆422Updated last year
• cube0x0 / BofRoast
  Beacon Object Files for roasting Active Directory
  ☆223Updated 3 years ago
• boku7 / Ninja_UUID_Runner
  Module Stomping, No New Thread, HellsGate syscaller, UUID Shellcode Runner for x64 Windows 10!
  ☆441Updated 2 years ago
• thefLink / RecycledGate
  Hellsgate + Halosgate/Tartarosgate. Ensures that all systemcalls go through ntdll.dll
  ☆462Updated 3 years ago
• boku7 / spawn
  Cobalt Strike BOF that spawns a sacrificial process, injects it with shellcode, and executes payload. Built to evade EDR/UserLand hooks b…
  ☆455Updated 2 years ago
• boku7 / HOLLOW
  EarlyBird process hollowing technique (BOF) - Spawns a process in a suspended state, inject shellcode, hijack main thread with APC, and e…
  ☆280Updated 2 years ago
• ajpc500 / BOFs
  Collection of Beacon Object Files
  ☆583Updated 2 years ago
• mgeeky / ElusiveMice
  Cobalt Strike User-Defined Reflective Loader with AV/EDR Evasion in mind
  ☆449Updated last year
• outflanknl / InlineWhispers
  Tool for working with Direct System Calls in Cobalt Strike's Beacon Object Files (BOF)
  ☆315Updated 3 years ago
• rsmudge / unhook-bof
  Remove API hooks from a Beacon process.
  ☆268Updated 3 years ago
• outflanknl / WdToggle
  A Beacon Object File (BOF) for Cobalt Strike which uses direct system calls to enable WDigest credential caching.
  ☆218Updated last year
• outflanknl / PrintNightmare
  ☆337Updated 3 years ago
• antonioCoco / MalSeclogon
  A little tool to play with the Seclogon service
  ☆312Updated 2 years ago
• S3cur3Th1sSh1t / SharpNamedPipePTH
  Pass the Hash to a named pipe for token Impersonation
  ☆302Updated last year
• anthemtotheego / InlineExecute-Assembly
  InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assem…
  ☆657Updated last year
• N4kedTurtle / PersistBOF
  A BOF to automate common persistence tasks for red teamers
  ☆274Updated 2 years ago
• 0xthirteen / StayKit
  Cobalt Strike kit for Persistence
  ☆475Updated 5 years ago
• mdsecactivebreach / DragonCastle
  A PoC that combines AutodialDLL lateral movement technique and SSP to scrape NTLM hashes from LSASS process.
  ☆298Updated 2 years ago
• CodeXTF2 / Burp2Malleable
  Quick python utility I wrote to turn HTTP requests from burp suite into Cobalt Strike Malleable C2 profiles
  ☆386Updated 2 years ago
• cube0x0 / MiniDump
  C# Lsass parser
  ☆291Updated 3 years ago
• VirtualAlllocEx / Create-Thread-Shellcode-Fetcher
  This POC gives you the possibility to compile a .exe to completely avoid statically detection by AV/EPP/EDR of your C2-shellcode and down…
  ☆246Updated last year
• boku7 / injectAmsiBypass
  Cobalt Strike BOF - Bypass AMSI in a remote process with code injection.
  ☆377Updated 2 years ago
• Yaxser / CobaltStrike-BOF
  Collection of beacon BOF written to learn windows and cobaltstrike
  ☆347Updated 2 years ago
• CCob / lsarelayx
  NTLM relaying for Windows made easy
  ☆562Updated last year
• VirtualAlllocEx / Payload-Download-Cradles
  This are different types of download cradles which should be an inspiration to play and create new download cradles to bypass AV/EPP/EDR …
  ☆257Updated 2 years ago
• ShutdownRepo / ShadowCoerce
  MS-FSRVP coercion abuse PoC
  ☆288Updated 3 years ago
• S3cur3Th1sSh1t / Nim-RunPE
  A Nim implementation of reflective PE-Loading from memory
  ☆278Updated 7 months ago
• m3rcer / Chisel-Strike
  A .NET XOR encrypted cobalt strike aggressor implementation for chisel to utilize faster proxy and advanced socks5 capabilities.
  ☆451Updated last year
• codewhitesec / HandleKatz
  PIC lsass dumper using cloned handles
  ☆583Updated 2 years ago
• oXis / GPUSleep
  Move CS beacon to GPU memory when sleeping
  ☆246Updated 3 years ago