Cuban Eight is a red team tool that packages a Windows PE payload into a .wsl file spoofing a real Linux distro installer. Double-click to deploy.
☆33Oct 16, 2026Updated 3 weeks ago
Alternatives and similar repositories for Cuban-Eight
Users that are interested in Cuban-Eight are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆25Oct 27, 2026Updated 2 weeks ago
- A small set of Beacon Object Files (BOFs) that I developed over the time with a Magic: The Gathering theme.☆22Jul 15, 2025Updated last year
- Clean Indirect Syscalls with Syscall Tampering.☆53Oct 25, 2026Updated 2 weeks ago
- Object File (BOF) that demonstrates privilege escalation through a misconfigured AlwaysInstallElevated policy.☆13Sep 17, 2026Updated last month
- Active Directory forensic framework☆16May 18, 2026Updated 5 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- A Position Independent Code (PIC) implementation of the execute-assembly command built with Crystal Palace.☆22Oct 4, 2026Updated last month
- Object file loader implemented as a post-ex DLL for asynchronous BOF execution.☆29Jul 23, 2026Updated 3 months ago
- ClickMyPayload creates realistic browser verification pages that silently copy PowerShell or CMD commands to the clipboard, display decoy…☆29Sep 25, 2026Updated last month
- Demonstrating 3 persistence layers from a single EXE, that converts itself into proxy DLLs at runtime☆108Mar 29, 2026Updated 7 months ago
- BOF and research notes from hunting execution paths, covering Shell.HWEventHandlerShellExecute COM execution through the AutoPlay IHWEven…☆39Jun 20, 2026Updated 4 months ago
- Implementing Ghostly-Hollowing using tampered syscalls for remote PE injection☆77Dec 26, 2025Updated 10 months ago
- NØW is a word-based shellcode encoding and obfuscation tool that transforms raw shellcode bytes into natural-looking English prose.☆92Jun 24, 2026Updated 4 months ago
- Tunneling tool for red teaming, designed to run in memory on a windows target and connect back to a Linux VPS so you can proxy tools into…☆54Aug 3, 2026Updated 3 months ago
- Collection of BOFs for Linux☆15Nov 2, 2026Updated last week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A PoC of User-Defined Reflective Loader for Havoc Framework built with Cystal Palace☆48Oct 18, 2026Updated 3 weeks ago
- Run PowerShell command without invoking powershell.exe☆27Apr 9, 2026Updated 7 months ago
- Staged DLL injection proof-of-concept built in C using Win32 APIs — developed in an isolated lab environment for red team certification s…☆42Jun 4, 2026Updated 5 months ago
- A poor man's attempt to replicate the shellcode execution technique demo'd by @3lk during STHACK 2026 (https://www.youtube.com/watch?v=al…☆41Oct 14, 2026Updated 3 weeks ago
- A collection of DPAPI hunting and parsing BOFs☆39Mar 3, 2026Updated 8 months ago
- ☆14Oct 7, 2025Updated last year
- Demonstration of the DLL party process injection technique☆99Oct 1, 2026Updated last month
- A stealthy process injection PoC combining Thread Name-Calling for payload delivery with Waiting Thread Hijacking for execution, with zer…☆141Oct 30, 2026Updated last week
- SmuggleMyPayload generates HTML pages that embed and reconstruct files client-side using JavaScript. The toolkit offers multiple HTML Smu…☆58Oct 13, 2026Updated 3 weeks ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A python proof of concept tool to assist in your payloads classification against EDR/AV's machine learning models☆39Oct 14, 2026Updated 3 weeks ago
- Experimentations with the MSBuild Capabilites in a default environment.☆24Dec 6, 2025Updated 11 months ago
- LPE Proof-of-Concept for Windows 11 abusing TrustedInstaller's Component Based Servicing (CBS) session COM object and junctions for arbit…☆61Nov 1, 2026Updated last week
- Enumerate user accounts and registered authentication methods via the Microsoft Self-Service Password Reset (SSPR) portal☆60Sep 15, 2026Updated last month
- ☆37Sep 6, 2026Updated 2 months ago
- Cobalt Strike BOF☆58Dec 10, 2025Updated 10 months ago
- A sleepmask based on Ekko that preserves unwind data at sleep time.☆57Mar 30, 2026Updated 7 months ago
- open source implementation of the UDC2 spec used in Cobalt Strike☆62Jul 4, 2026Updated 4 months ago
- A small Windows local-privilege-escalation (LPE) misconfiguration auditor with a terminal UI, built with C++20 and FTXUI☆25Oct 23, 2026Updated 2 weeks ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- CVE-2026-97798 Windows Error Reporting - Command Injection TO SYSTEM☆68Oct 30, 2026Updated last week
- Remote service-staging tool built on Impacket, designed for BOF-style lateral movement workflows that lets you upload custom service load…☆132Dec 7, 2025Updated 11 months ago
- Malware as a Service Ludus Range☆143Sep 24, 2026Updated last month
- Sleep Obfuscation via CreateThreadpoolTimer☆24Jul 27, 2026Updated 3 months ago
- Evasion kit for Cobalt Strike☆18Oct 31, 2026Updated last week
- Async BOF that notifies the operator when a user connects to a local or remote target system.☆34Jul 30, 2026Updated 3 months ago
- Collection of reversed vulnerable drivers weaponized into process killers. PPL won't save you.☆116Oct 18, 2026Updated 3 weeks ago
Are these results useful?