These are the slide decks and source code for Brute Ratel Seminar conducted on 24th August 2023. The youtube video for the seminar can be found here:
☆24Aug 26, 2023Updated 3 years ago
Alternatives and similar repositories for BRC4-Seminar-Stage-I
Users that are interested in BRC4-Seminar-Stage-I are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A simple BOF (Beacon Object File) to search files in the system☆20Dec 2, 2023Updated 2 years ago
- Beacon Object File to locate and suspend the threads hosting the Event Log service☆29Jun 17, 2022Updated 4 years ago
- A BOF for enumerating version information for DLLs associated for a Beacon process.☆16Nov 23, 2021Updated 4 years ago
- Simple C# Redirector☆96Aug 31, 2025Updated last year
- Chromium Cookie import / export tool☆11Jul 21, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Beacon Object file set service sd☆11Mar 6, 2023Updated 3 years ago
- Run Cobalt Strike BOFs in Brute Ratel C4!☆91Apr 15, 2025Updated last year
- Situational Awareness commands implemented using Beacon Object Files☆13Jul 22, 2026Updated 3 months ago
- A proof of concept of real custom GetProcAddress and GetModuleBaseAddress☆20Jul 9, 2022Updated 4 years ago
- Cobalt Strike Beacon Object File (BOF) that uses RegConnectRegistryA + RegOpenKeyExA API to dump registry hives on remote computer☆18Mar 4, 2023Updated 3 years ago
- This repository provides the core to build your own External C2 Server and Connector for Brute Ratel C4☆60May 8, 2022Updated 4 years ago
- malware written for educational purposes☆71Dec 31, 2025Updated 10 months ago
- GhostLoader - AppDomainManager - Injection - 攻壳机动队☆54May 21, 2020Updated 6 years ago
- A VSCode plugin to assist with BOF development.☆37Aug 14, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Cobalt Strike notifications via NTFY.☆16Sep 24, 2024Updated 2 years ago
- Async port/ping scanner BOF. Supports IP/port ranges, CIDR notation and hostnames.☆20Jul 23, 2026Updated 3 months ago
- ☆30Nov 7, 2022Updated 4 years ago
- An easy way to convert BloodHound output files into data that can be imported into reporting software like Dradis and Plextrac. Built by …☆20Oct 15, 2020Updated 6 years ago
- Beacon Object File implementation of Event Viewer deserialization UAC bypass☆133May 6, 2022Updated 4 years ago
- C code to enable ETW tracing for Dotnet Assemblies☆31Aug 12, 2022Updated 4 years ago
- Cobalt Strike Beacon Object File to enable the webdav client service on x64 windows hosts☆27Sep 15, 2023Updated 3 years ago
- ☆64Jan 2, 2024Updated 2 years ago
- Cobalt Strike Beacon Object File (BOF) that uses CredUIPromptForWindowsCredentials API to invoke credential prompt☆24Nov 23, 2022Updated 3 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- ELF Beacon Object File (BOF) Template☆20Nov 18, 2024Updated last year
- Reimplementation of the KExecDD DSE bypass technique.☆61Sep 7, 2024Updated 2 years ago
- This repository contains scripts, configurations and deprecated payload loaders for Brute Ratel C4 (https://bruteratel.com/)☆306Aug 5, 2024Updated 2 years ago
- Cobalt Strike + Brute Ratel C4 Beacon Object File (BOF) Conversion of the Mockingjay Process Injection Technique☆159Nov 7, 2023Updated 3 years ago
- Tool to obtain hash using MS-SNTP for user accounts☆35Jan 22, 2025Updated last year
- Beacon Object File to delete token privileges and lower the integrity level to untrusted for a specified process☆44Jun 15, 2022Updated 4 years ago
- Example of async client/server sockets in .NET 5☆16Jun 9, 2021Updated 5 years ago
- TokenCert☆105Nov 15, 2024Updated last year
- CobaltWhispers is an aggressor script that utilizes a collection of Beacon Object Files (BOF) for Cobalt Strike to perform process inject…☆242Jan 4, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Beacon Object File (BOF) for dumping certificates (and, when possible, private keys) on Windows☆13Jun 2, 2025Updated last year
- ☆13Feb 20, 2022Updated 4 years ago
- miscellaneous codes☆38Sep 24, 2023Updated 3 years ago
- Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird …☆15Feb 13, 2024Updated 2 years ago
- A simple BOF implementation of klist using Windows API☆32Jul 7, 2022Updated 4 years ago
- Convert an LDIF file to JSON files ingestible by BloodHound☆47May 20, 2026Updated 5 months ago
- in-process powershell runner for BRC4☆48Oct 31, 2023Updated 3 years ago
Are these results useful?