Pinned

1. BOF-patchit BOF-patchit Public

   An all-in-one Cobalt Strike BOF to patch, check and revert AMSI and ETW for x64 process. Both syscalls and dynamic resolve versions are available.

   C 112 18

2. SysmonQuiet SysmonQuiet Public

   RDLL for Cobalt Strike beacon to silence sysmon process

   C 84 16

3. sleepmask_PatchlessHook sleepmask_PatchlessHook Public

   Code snippets to add on top of cobalt strike sleep mask to achieve patchless hook on AMSI and ETW

   C 74 8

4. sleepmask_ekko_cfg sleepmask_ekko_cfg Public

   Code snippets to add on top of cobalt strike sleepmask kit so that ekko can work in a CFG protected process

   C 38 8

5. sw2-secinject sw2-secinject Public

   Section Mapping Process Injection modified with SysWhisper2 (sw2-secinject): Cobalt Strike BOF

   C 41 11

6. BeaconNotifier-Discord BeaconNotifier-Discord Public

   Cobalt strike CNA script to notify you via Discord whenever there is a new beacon.

   Python 30 4