oXis / GPUSleep
Move CS beacon to GPU memory when sleeping
☆212Updated 2 years ago
Related projects: ⓘ
- CobaltStrike BOF - Inject ETW Bypass into Remote Process via Syscalls (HellsGate|HalosGate)☆274Updated 2 years ago
- Remove API hooks from a Beacon process.☆263Updated 3 years ago
- ☆140Updated this week
- A Beacon Object File (BOF) for Cobalt Strike which uses direct system calls to enable WDigest credential caching.☆212Updated last year
- Another LSASS dumping tool that uses a dynamically compiled LSA plugin to grab an lsass handle and API hooking for capturing the dump in…☆258Updated 3 years ago
- Cobalt Strike Beacon Object File (BOF) that uses handwritten shellcode to return the process Environment strings without touching any DLL…☆160Updated last year
- ☆221Updated this week
- A little tool to play with the Seclogon service☆301Updated 2 years ago
- Pseudo-malicious usermode memory artifact generator kit designed to easily mimic the footprints left by real malware on an infected Windo…☆217Updated 6 months ago
- ☆150Updated this week
- A basic emulation of an "RPC Backdoor"☆207Updated 2 years ago
- A BOF to automate common persistence tasks for red teamers☆263Updated last year
- You shall pass☆241Updated 2 years ago
- Reuse open handles to dynamically dump LSASS.☆231Updated 5 months ago
- A Cobalt Strike Beacon Object File (BOF) project which uses direct system calls to enumerate processes for specific loaded modules or pro…☆265Updated last year
- EarlyBird process hollowing technique (BOF) - Spawns a process in a suspended state, inject shellcode, hijack main thread with APC, and e…☆263Updated last year
- PowerShell script to generate "proxy" counterparts to easily perform DLL Sideloading☆113Updated 5 years ago
- Collection of beacon object files for use with Cobalt Strike to facilitate 🐚.☆164Updated 3 years ago
- Collection of beacon BOF written to learn windows and cobaltstrike☆340Updated last year
- Module Stomping, No New Thread, HellsGate syscaller, UUID Shellcode Runner for x64 Windows 10!☆430Updated last year
- Beacon Object File (BOF) Creation Helper☆219Updated 2 years ago
- Pass the Hash to a named pipe for token Impersonation☆291Updated 9 months ago
- CobaltWhispers is an aggressor script that utilizes a collection of Beacon Object Files (BOF) for Cobalt Strike to perform process inject…☆225Updated last year
- ☆245Updated this week
- Dumping LSASS with a duplicated handle from custom LSA plugin☆194Updated 2 years ago
- Building and Executing Position Independent Shellcode from Object Files in Memory☆154Updated 3 years ago
- ☆146Updated this week
- ☆164Updated 3 years ago
- A Visual Studio template used to create Cobalt Strike BOFs☆278Updated 2 years ago