Cobalt Strike Beacon Object Files (BOFs) written in rust with rust core and alloc.

Beacon Object File Loader

WindowSpy is a Cobalt Strike Beacon Object File meant for automated and targeted user surveillance.

Execute unmanaged Windows executables in CobaltStrike Beacons

A CobaltStrike toolkit to write files produced by Beacon to memory instead of disk

A Beacon Object File (BOF) for Cobalt Strike which uses direct system calls to enable WDigest credential caching.

The swiss army knife of LSASS dumping

Collection of Beacon Object Files

Collection of Beacon Object Files (BOF) for Cobalt Strike

BOF implementation of @_EthicalChaos_'s ThreadlessInject project. A novel process injection technique with no thread creation, released at BSides Cymru 2023.

Cobalt Strike Beacon Object File to enable the webdav client service on x64 windows hosts

BOF to steal browser cookies & credentials

Cobalt Strike Beacon Object File to to change the user's desktop wallpaper

A BOF that runs unmanaged PEs inline

BOF for Kerberos abuse (an implementation of some important features of the Rubeus).

Situational Awareness commands implemented using Beacon Object Files

Identify common EDR processes, directories, and services. Simple BOF of Invoke-EDRChecker.

Port of Cobalt Strike's Process Inject Kit