A little tool to play with Windows security

The swiss army knife of LSASS dumping

Situational Awareness commands implemented using Beacon Object Files

A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.

A BOF that runs unmanaged PEs inline

Collection of Beacon Object Files (BOF) for Cobalt Strike

Collection of UAC Bypass Techniques Weaponized as BOFs

PrivKit is a simple beacon object file that detects privilege escalation vulnerabilities caused by misconfigurations on Windows OS.

Library of BOFs to interact with SQL servers

C or BOF file to extract WebKit master key to decrypt user cookie

Take a screenshot without injection for Cobalt Strike

adws enumeration bof

In-memory token vault BOF for Cobalt Strike

Internal Monologue BOF