Alternatives and similar repositories for SuspendEventLogBOF:

Users that are interested in SuspendEventLogBOF are comparing it to the libraries listed below

• netero1010 / Quser-BOF
  Cobalt Strike BOF for quser.exe implementation using Windows API
  ☆83Updated last year
• guervild / InlineZipper
  ☆22Updated 3 years ago
• d4rkiZ / EmbedExeLnk-
  EmbedExeLnk by x86matthew modified by d4rkiZ
  ☆34Updated last year
• Yair-Men / Passenger
  ProcExp Driver (Ab)use
  ☆20Updated 2 years ago
• Hagrid29 / BOF-CredUI
  Cobalt Strike Beacon Object File (BOF) that uses CredUIPromptForWindowsCredentials API to invoke credential prompt
  ☆18Updated 2 years ago
• eladshamir / SharpElevator
  SharpElevator is a C# implementation of Elevator for UAC bypass. This UAC bypass was originally discovered by James Forshaw and publishe…
  ☆51Updated 2 years ago
• jsecu / BOF-pack-1
  A care package of useful bofs for red team engagments
  ☆54Updated 2 months ago
• VoldeSec / BOF-NPPSPY
  Porting of NPPSPY by Grzegorz Tworek to 'man in the middle' the user logon process, and store the user's name and password in an unassumi…
  ☆17Updated last year
• ScriptIdiot / sleepmask_ekko_cfg
  Code snippets to add on top of cobalt strike sleepmask kit so that ekko can work in a CFG protected process
  ☆43Updated last year
• snovvcrash / BOFs
  Beacon Object Files (not Buffer Overflows)
  ☆53Updated last year
• parzel / GoSleepyCrypt
  In-memory sleep encryption and heap encryption for Go applications through a shellcode function.
  ☆39Updated last year
• exploitblizzard / Syscall-Example
  Using syscall to load shellcode, Evasion techniques
  ☆27Updated 3 years ago
• EspressoCake / DynamicTabRename
  CNA that interacts with a JAR file to dynamically rename GUI tabs within Cobalt Strike from a JSON file.
  ☆23Updated 2 years ago
• nick-frischkorn / TokenStripBOF
  Beacon Object File to delete token privileges and lower the integrity level to untrusted for a specified process
  ☆38Updated 2 years ago
• jsecu / ElevatedEvents
  ☆29Updated 2 years ago
• Aetsu / SLib
  SLib is a sandbox evasion library that implements some of the checks from https://evasions.checkpoint.com in C#
  ☆63Updated last year
• Hagrid29 / DumpAADSyncCreds
  C# implementation of Get-AADIntSyncCredentials from AADInternals, which extracts Azure AD Connect credentials to AD and Azure AD from AAD…
  ☆39Updated last year
• 0x3rhy / BypassCredGuard-BOF
  BypassCredGuard CS BOF
  ☆32Updated last month
• Octoberfest7 / CS_Uploads_Tracker
  Aggressor script add-in for CobaltStrike to track file uploads
  ☆36Updated 2 years ago
• c3r3br4t3 / ShadowRDP
  ☆68Updated last year
• REDMED-X / InjectKit
  Modified versions of the Cobalt Strike Process Injection Kit
  ☆93Updated last year
• MaorSabag / interactive-execute-shellcode
  A simple PoC of injection shellcode into a remote process and get the output using namepipe
  ☆42Updated last year
• Henkru / cs-get-last-error
  An aggressor script for Cobalt Strike to query Windows' GetLastError messages
  ☆18Updated 2 years ago
• susMdT / AceLdr
  Cobalt Strike UDRL for memory scanner evasion.
  ☆47Updated last year
• EspressoCake / BOF_NativeAPI_Definitions-VSCode
  A VSCode plugin to assist with BOF development.
  ☆33Updated 6 months ago
• Octoberfest7 / Backstab_BOF
  Beacon Object File implementation of Yaxser's Backstab
  ☆14Updated 2 years ago
• Octoberfest7 / JumpSession_BOF
  Beacon Object File allowing creation of Beacons in different sessions.
  ☆78Updated 2 years ago
• leftp / SpoolSamplerNET
  Implementation of SpoolSample without rDLL
  ☆31Updated 4 years ago
• weaselsec / ClickOnce-AppDomain-Manager-Injection
  Click Once + App Domain
  ☆62Updated last year
• BOFs / BOFs
  Beacon Object Files.
  ☆35Updated last year