Cobalt Strike BOF that identifies Attack Surface Reduction (ASR) rules, actions, and exclusion locations

Collection of Beacon Object Files (BOF) for Cobalt Strike

Situational Awareness commands implemented using Beacon Object Files

A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.

Beacon Object File & C# project to check LDAP signing

A BOF that runs unmanaged PEs inline

BOF for Kerberos abuse (an implementation of some important features of the Rubeus).

Tool for working with Direct System Calls in Cobalt Strike's Beacon Object Files (BOF) via Syswhispers2

Dump cookies and credentials directly from Chrome/Edge process memory

A BOF to automate common persistence tasks for red teamers

PowerShell rebuilt in C# for Red Teaming purposes

Determine if the WebClient Service (WebDAV) is running on a remote system

A Visual Studio template used to create Cobalt Strike BOFs

Fileless lateral movement tool that relies on ChangeServiceConfigA to run command

A collection of tools to abuse chrome browser

BOF and Python3 implementation of technique to unbind 445/tcp on Windows via SCM interactions

A Beacon Object File (BOF) template for Visual Studio