rkbennett / pybof
Python module for running BOFs
☆64Updated last year
Related projects ⓘ
Alternatives and complementary repositories for pybof
- A VSCode devcontainer for development of COFF files with batteries included.☆47Updated last year
- Proof of Concept code and samples presenting emerging threat of MSI installer files.☆77Updated last year
- Click Once + App Domain☆62Updated 11 months ago
- A care package of useful bofs for red team engagments☆48Updated 2 years ago
- a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless☆39Updated 4 months ago
- Lockless BOF☆62Updated 9 months ago
- a short C code POC to gain persistence and evade sysmon event code registry (creation, update and deletion) REG_NOTIFY_CLASS Registry Cal…☆51Updated last year
- ☆59Updated 4 months ago
- Simple BOF to read the protection level of a process☆104Updated last year
- ☆47Updated last year
- HelpSystems Nanodump, but wrapped in powershell via Invoke-ReflectivePEInjection☆53Updated 2 years ago
- Beacon Object Files (not Buffer Overflows)☆51Updated last year
- Lateral Movement via the .NET Profiler☆76Updated this week
- ☆73Updated last year
- ☆61Updated 2 years ago
- Payload for DLL sideloading of the OneDriveUpdater.exe, based on the PaloAltoNetwork Unit42's blog post☆86Updated 2 years ago
- Depending on the AV/EPP/EDR creating a Taskschedule Job with a default cradle is often flagged☆86Updated 2 years ago
- ☆68Updated last year
- ☆35Updated 2 years ago
- Programmatically start WebClient from an unprivileged session to enable that juicy privesc.☆66Updated last year
- C# version of NTLMRawUnHide☆72Updated 2 years ago
- Experimental PoC for unhooking API functions using in-memory patching, without VirtualProtect, for one specific EDR.☆38Updated last year
- RDLL for Cobalt Strike beacon to silence sysmon process☆85Updated 2 years ago
- ☆83Updated 2 years ago
- Tool for playing with Windows Access Token manipulation.☆52Updated last year
- ☆27Updated 3 months ago
- Leveraging AWS Lambda Function URLs for C2 Redirection☆24Updated last year
- Scripts for public use that we've randomly written, or have updated from other people's work.☆38Updated 4 months ago
- A C# port of the MinHook API hooking library☆50Updated 2 years ago
- Public repo of some woking evilginx phishlets☆21Updated 2 weeks ago