Collection of BOFs created for red team/adversary engagements. Created to be small and interchangeable, for quick recon or eventing.

Sanctum is an experimental proof-of-concept EDR, designed to detect modern malware techniques, above and beyond the capabilities of antivirus. Built in Rust.

EDRStartupHinder: A red team tool to prevent Antivirus and EDR from running.

An alternative to the builtin clipboard feature in Cobalt Strike that adds the capability to enable/disable and dump the clipboard history.

Obfusk8: lightweight Obfuscation library based on C++17 / Header Only for windows binaries

Beacon Object File (BOF) port of DumpGuard for extracting NTLMv1 hashes from sessions on modern Windows systems.

Title is self explaining, well theres few methods we can do to read locked file and play with it...

Shellcode injection using the Windows Debugging API

PoC for generating bthprops.cpl module designed to be loaded by Fsquirt.exe LOLBin

PoC for generating an APPWIZ.cpl module designed to be loaded by Fondue.exe LOLBin

Vectored Exception Handling Squared

Early cascade injection PoC based on Outflanks blog post written in Rust

Send and receive SMS messages using your Android phone programmatically via a simple HTTP API

Orsted C2 Framework

Beacon Object Files (BOFs) for Cobalt Strike and Havoc C2. Implementations of Active Directory attacks and post-exploitation techniques.

Beacon Object File for Cobalt Strike that executes .NET assemblies in beacon with evasion techniques.

AppLocker-Based EDR Neutralization

Windows Session Hijacking via COM

Cobalt Strike module x loader x profile x wike / A public collection of open resources for Cobalt Strike (only legal use in Red Team and penetration testing

Collection of many ldap bofs for domain enumeration and privilege escalation. Created for use with the Adaptix C2.

Next-Generation Remote Analysis Suite for Reverse Engineering.

UDC2 implementation that provides an ICMP C2 channel

Telegram Account Phishing toolbar Public Version. This project is intended solely for educational purposes and authorized testing. Any unauthorized or malicious use is strictly prohibited. The deve…

template for developing custom C2 channels for Cobalt Strike using IAT hooks applied by a reflective loader.

Exploit for ToolShell

Indirect-Shellcode-Executor expoits the miss-configuration/vulnerability present on the API Windows method ReadProcessMemory discovered by DarkCoderSc. It exploits the nature of the in/out pointer …