A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!

Local Privilege Escalation Edition for CVE-2021-1675/CVE-2021-34527

Fully functional, from-scratch alternative to the Cobalt Strike Beacon (red teaming tool), offering transparency and flexibility for security professionals and enthusiasts.

Manual Map DLL injection implemented with Cobalt Strike's Beacon Object Files.

RDLL for Cobalt Strike beacon to silence sysmon process

Code snippets to add on top of cobalt strike sleep mask to achieve patchless hook on AMSI and ETW

Code snippets to add on top of cobalt strike sleepmask kit so that ekko can work in a CFG protected process

RedBlock is an Nginx module designed for offensive security operations and red teaming. This module empowers security professionals to easily block all IPs associated with hosting and cloud infrastructure, as well as known sandbox environments.

A BOF tool that can be used to collect passwords using CredUIPromptForWindowsCredentialsName.

Beacon Object File PoC implementation of KillDefender

Collection of personal Beacon Object Files (BOFs)

Beacon Object File to automatically/unattended inject in one of the specified processes.