A work in progress of constructing a minimal http(s) beacon for Cobalt Strike.
☆26Apr 28, 2022Updated 4 years ago
Alternatives and similar repositories for minbeacon
Users that are interested in minbeacon are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A spin-off research project. Cobalt Strike x Notion collab 2022☆52Apr 8, 2022Updated 4 years ago
- impersonate trustedinstaller by fiddling with tokens☆13Aug 30, 2021Updated 5 years ago
- Thanks to @d35ha☆12Aug 16, 2021Updated 5 years ago
- A PoC for adding NtContinue to CFG allowed list in order to make Ekko work in a CFG protected process☆113Aug 29, 2022Updated 4 years ago
- Beacon Object File to delete token privileges and lower the integrity level to untrusted for a specified process☆44Jun 15, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Section Mapping Process Injection modified with SysWhisper2 (sw2-secinject): Cobalt Strike BOF☆44Jun 23, 2022Updated 4 years ago
- A compilation of Aggressor/Sleep scripts for operational purposes that I've made.☆11Sep 17, 2021Updated 5 years ago
- BOF/COFF obj file to PIC(shellcode). by golang☆40Sep 28, 2022Updated 4 years ago
- Iterate over Windows Handles☆16Nov 18, 2025Updated 11 months ago
- Code snippets to add on top of cobalt strike sleepmask kit so that ekko can work in a CFG protected process☆47Mar 15, 2023Updated 3 years ago
- all credits go to @mgeeky☆65Oct 14, 2021Updated 5 years ago
- ☆11Nov 5, 2025Updated 11 months ago
- Automatically parse Malleable C2 profiled into CrossC2 rebinding library source code☆20Feb 13, 2023Updated 3 years ago
- Cobalt Strike Beacon Object File (BOF) that uses RegConnectRegistryA + RegOpenKeyExA API to dump registry hives on remote computer☆18Mar 4, 2023Updated 3 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- ☆14Nov 24, 2022Updated 3 years ago
- Collection of BOFs for Cobalt Strike☆32Mar 28, 2023Updated 3 years ago
- 一个用于隐藏C2的、开箱即用的反向代理服务器。旨在省去繁琐的配置Nginx服务的过程。☆13Feb 14, 2022Updated 4 years ago
- DPX - the Doge Packer for eXecutables☆29Dec 21, 2021Updated 4 years ago
- RunPE using Hell's Gate technique.☆31Dec 4, 2020Updated 5 years ago
- desktop screenshot☆27Apr 26, 2023Updated 3 years ago
- CS http Dynamic Encrypt Bridge.☆47Nov 12, 2021Updated 4 years ago
- Load ssp dll golang implementation☆18Jan 18, 2022Updated 4 years ago
- Titan: A crappy Reflective Loader written in C and assembly for Cobalt Strike. Redirects DNS Beacon over DoH☆87Sep 6, 2021Updated 5 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆50Aug 28, 2021Updated 5 years ago
- About C# loader that copies a chunk at the time of the shellcode in memory in a suspended process, rather that all at once☆12Jul 14, 2022Updated 4 years ago
- Beacon.dll reverse☆139Sep 5, 2021Updated 5 years ago
- A BOF.NET program to split a file into smaller chunks and email it via a specified SMTP relay.☆17Jun 24, 2021Updated 5 years ago
- Stop Windows Defender programmatically☆15Jan 17, 2022Updated 4 years ago
- 一款支持高度自定义的 Java 内存马生成工具☆11Jun 9, 2023Updated 3 years ago
- Rust编写的父进程PID欺骗技术测试工具☆51Jan 9, 2023Updated 3 years ago
- Cobalt Strike beacon object file implementation for trusted path UAC bypass. The target executable will be called without involving "cmd.…☆143Aug 16, 2021Updated 5 years ago
- DLL Unhooking☆12Mar 26, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Golang AMSI Bypass☆23Oct 17, 2021Updated 5 years ago
- ☆21Feb 27, 2022Updated 4 years ago
- Cobalt Strike Beacon Object File (BOF) that uses LogonUserSSPI API to perform kerberos-based password spray☆46Mar 4, 2023Updated 3 years ago
- Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods☆13Sep 30, 2022Updated 4 years ago
- Beacon Object File to locate and suspend the threads hosting the Event Log service☆29Jun 17, 2022Updated 4 years ago
- Code snippets to add on top of cobalt strike sleep mask to achieve patchless hook on AMSI and ETW☆87Mar 19, 2023Updated 3 years ago
- Golang implementation of Reflective load PE from memory☆62Jan 10, 2022Updated 4 years ago