Sophisticated In-Memory PE loader for Cobalt Strike
☆24Jan 24, 2026Updated 8 months ago
Alternatives and similar repositories for inline-execute-all
Users that are interested in inline-execute-all are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆16Jan 15, 2026Updated 9 months ago
- A stealth-focused kernel-mode virtual HID mouse driver for Windows. Built with KMDF and VHF for precise, hardware-level input simulation …☆49Jul 27, 2026Updated 2 months ago
- Beacon Object File (BOF) for identifying dependent child services of a given parent.☆19Jun 20, 2025Updated last year
- Async BOF to monitor and detect clipboard changes on a target system and return the clipboard contents.☆22Jul 23, 2026Updated 2 months ago
- A BOF designed to inspect processes memory and addresses☆41Apr 19, 2026Updated 6 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Dockerized template to build CS BOFs using clang-cl☆26Jan 29, 2026Updated 8 months ago
- Cobalt Strike BOF for extracting Firefox passwords and cookies. Decrypts saved credentials using NSS, supports key3.db/key4.db, logins.js…☆42Jul 5, 2026Updated 3 months ago
- AWS S3 User-Defined C2☆25Oct 6, 2026Updated last week
- macOS Container Payload Wrapper☆23Mar 13, 2026Updated 7 months ago
- Proof of Concept for Process Code Injection Without Using WriteProcessMemory☆151Sep 27, 2026Updated 3 weeks ago
- Beacon Object File (BOF) implementation of the dnscmd.exe functionality used to obtain remote code execution on an ADIDNS server by explo…☆57Jul 8, 2026Updated 3 months ago
- Cobalt Strike BOF to obtain location data☆29Jul 4, 2026Updated 3 months ago
- Bof of RegPwn by MDSec☆130Mar 15, 2026Updated 7 months ago
- ☆10Sep 19, 2024Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A BOF that suspends non-GUI threads for a target process or resumes them resulting in stealthy process silencing.☆58Apr 14, 2025Updated last year
- **CVE-2026-2636** is a vulnerability in the Windows Common Log File System (CLFS) driver (`CLFS.sys`). An unprivileged user can trigger a…☆15Feb 26, 2026Updated 7 months ago
- SysTrace - Linux System Call Monitor using PTRACE API , It traces system calls, monitors process, file, network, and memory activity, det…☆25Sep 1, 2026Updated last month
- example use of defining your own injection technique for explicit injection and or spawn (fork & run)☆19Jan 3, 2026Updated 9 months ago
- Some anti-sandbox codes, copy directly to strengthen your own ShellCode☆12Dec 26, 2022Updated 3 years ago
- ETW Explorer☆45Aug 21, 2026Updated last month
- Claude Code skill: turn confirmed vulnerabilities into submission-ready DOCX reports | 漏洞报告成稿 skill（SRC/0day 提交稿、分层验证门、Step 式 PoC、截图铁律）☆82Aug 21, 2026Updated last month
- Porting of NPPSPY by Grzegorz Tworek to 'man in the middle' the user logon process, and store the user's name and password in an unassumi…☆20Apr 24, 2023Updated 3 years ago
- Shellcode Loader for Master Thesis☆74Jul 5, 2026Updated 3 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Beacon Object File for Cobalt Strike that executes .NET assemblies in beacon with evasion techniques.☆200Dec 23, 2025Updated 9 months ago
- Audiodg.exe DLL hijacking for LPE with reboot-free restart primitive. Executes code as LOCAL SERVICE, escalates to SYSTEM via Scheduled T…☆128Jan 24, 2026Updated 8 months ago
- ☆80Jul 6, 2026Updated 3 months ago
- Havoc BOF implementation of BYOVD attack to terminate PPL-protected EDR processes using a signed Microsoft kernel driver.☆40Apr 6, 2026Updated 6 months ago
- A Cobalt Strike payload generator and lateral movement aggressor script which places Beacon shellcode into a custom shellcode loader☆44Sep 25, 2024Updated 2 years ago
- Creation and removal of Defender path exclusions and exceptions in C#.☆31Nov 1, 2023Updated 2 years ago
- Windows memory scanner for call stack spoofing detection, unbacked shellcode, injected DLLs and in-memory C2 implants.☆38May 22, 2026Updated 4 months ago
- External C2 is a specification to allow third-party programs to act as a communication layer for Cobalt Strike’s Beacon payload.☆23Jul 17, 2025Updated last year
- Stack spoofing Detection for CET processes by comparing shadow and user stacks.☆41May 22, 2026Updated 4 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Mythic C2 agent with a full in-memory BOF loader for macOS and Linux☆107Sep 16, 2026Updated last month
- A POC tool for exploring dev-tunnels☆73May 5, 2026Updated 5 months ago
- An alternative to the builtin clipboard feature in Cobalt Strike that adds the capability to enable/disable and dump the clipboard histor…☆117Apr 16, 2026Updated 6 months ago
- OLLVM-Next (Ensia): The next generation LLVM based Obfuscator☆32Updated this week
- Cobalt Strike BOF☆58Dec 10, 2025Updated 10 months ago
- Memory API proxy via signed mozglue.dll☆41Jun 25, 2026Updated 3 months ago
- A BOF that's a BOF Loader and more☆213Apr 6, 2026Updated 6 months ago