Beacon Object File to automatically/unattended inject in one of the specified processes.

Collection of personal Beacon Object Files (BOFs)

Beacon Object File PoC implementation of KillDefender

A BOF tool that can be used to collect passwords using CredUIPromptForWindowsCredentialsName.

RedBlock is an Nginx module designed for offensive security operations and red teaming. This module empowers security professionals to easily block all IPs associated with hosting and cloud infrastructure, as well as known sandbox environments.

Fully functional, from-scratch alternative to the Cobalt Strike Beacon (red teaming tool), offering transparency and flexibility for security professionals and enthusiasts.

Code snippets to add on top of cobalt strike sleepmask kit so that ekko can work in a CFG protected process

Code snippets to add on top of cobalt strike sleep mask to achieve patchless hook on AMSI and ETW

RDLL for Cobalt Strike beacon to silence sysmon process

Manual Map DLL injection implemented with Cobalt Strike's Beacon Object Files.

Local Privilege Escalation Edition for CVE-2021-1675/CVE-2021-34527

A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!