Detects Module Stomping as implemented by Cobalt Strike
☆17Dec 13, 2020Updated 5 years ago
Alternatives and similar repositories for DetectCobaltStomp
Users that are interested in DetectCobaltStomp are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Python scripts that helps in the development of PPKG binaries☆16Jul 31, 2026Updated 3 months ago
- Post-ex tool to interact with chromium browser when CDP is enabled☆47May 15, 2026Updated 5 months ago
- One PsExec client to rule them all☆16Mar 25, 2026Updated 7 months ago
- ☆13Mar 31, 2026Updated 7 months ago
- Porting of NPPSPY by Grzegorz Tworek to 'man in the middle' the user logon process, and store the user's name and password in an unassumi…☆20Apr 24, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Crystal Palace library for proxying Nt API calls via the Threadpool. Updated for call gadgets.☆23Nov 11, 2025Updated 11 months ago
- Async port/ping scanner BOF. Supports IP/port ranges, CIDR notation and hostnames.☆20Jul 23, 2026Updated 3 months ago
- RISC-V VM based shellcode loader PoC - Still WIP☆38Aug 1, 2026Updated 3 months ago
- ☆37May 19, 2026Updated 5 months ago
- Claude Code skill for systematically reducing VirusTotal/EDR detection rates on compiled Go binaries via PE structural analysis and disci…☆20Jun 24, 2026Updated 4 months ago
- Async PICO Hub is a work-in-progress framework to extend Cobalt Strike with custom event monitoring and in-process Asynchronous BOFs☆28Jun 4, 2026Updated 5 months ago
- SilentChrome-BOF installs Chromium extension, native messaging, and Isolated Web App profile artifacts☆53Aug 10, 2026Updated 2 months ago
- ☆75Apr 20, 2026Updated 6 months ago
- some research on EDR deconditioning☆16Jun 4, 2026Updated 5 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Patchless ETW & AMSI bypass POC reverse-engineered from Turla’s Kazuar v3 loader.☆24Jan 14, 2026Updated 9 months ago
- vbkview is a tool designed to browse and extract data from unencrypted Veeam backups.☆15Jul 20, 2026Updated 3 months ago
- CVE-2026-112611/112610: CoreGraphics PDF out-of-bounds writes (fixed in iOS 27.2) — fix-diff analysis, on-device proof, methodology, and …☆19Oct 27, 2026Updated last week
- CnaEmulator is a standalone, general-purpose development, emulation, and testing harness for Cobalt Strike Aggressor Scripts (.cna)☆22Sep 20, 2026Updated last month
- Ludus role for deploying a Cobalt Strike Teamserver onto Linux servers☆19Mar 19, 2025Updated last year
- Bunch of BOF files☆46Jun 30, 2025Updated last year
- Open Source implementation of PsPipeJack☆27May 27, 2026Updated 5 months ago
- Birds-eye view for web application coverage on a domain.☆12Apr 4, 2026Updated 7 months ago
- Source-to-source obfuscator (ClangTooling) for C☆13Sep 2, 2026Updated 2 months ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- A credential extraction BOF for Veeam Backup and Replication and Veeam One☆82Sep 16, 2026Updated last month
- Prime a process for injection when S1 is present☆13Feb 8, 2025Updated last year
- A vibe-coded port of wiretap☆37Updated this week
- Beacon Object File (BOF) implementation of the dnscmd.exe functionality used to obtain remote code execution on an ADIDNS server by explo…☆58Jul 8, 2026Updated 3 months ago
- A windows 11 rootkit in Rust☆22Mar 23, 2025Updated last year
- Dirty PoC on how to abuse S1's VEH for Vectored Syscalls and Local Execution☆47Oct 11, 2025Updated last year
- ☆14Oct 1, 2025Updated last year
- OPFOR Scripting Engine☆14Sep 4, 2026Updated 2 months ago
- A python polymorphic engine for C programs☆11Dec 8, 2023Updated 2 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Ludus roles to deploy ASR rules and MDI auditing settings☆25Aug 5, 2025Updated last year
- A template programming library for Kernel Mode Windows drivers.☆13Jul 12, 2016Updated 10 years ago
- Beacon Object File (BOF) that utilizes the Early Bird Cryo Injection technique in order to perform shellcode injection through frozen job…☆19Nov 17, 2025Updated 11 months ago
- Tool that gathers a customizable set of ETW telemetry and generates user-defined detections☆56Jan 28, 2026Updated 9 months ago
- EQGRP: Replicating DarkPulsar, an DLL capable of hooking Security Package Method Tables on the Heap!☆15Oct 11, 2020Updated 6 years ago
- BOF to terminate a process via PID as argument☆28Sep 7, 2025Updated last year
- External C2 is a specification to allow third-party programs to act as a communication layer for Cobalt Strike’s Beacon payload.☆23Jul 17, 2025Updated last year