A .NET Runtime for Cobalt Strike's Beacon Object Files

Run Cobalt Strike BOFs in Brute Ratel C4!

BOF implementation of delete self poc that delete a locked executable or a currently running file from disk by its pid, path, or the current process.

Malware?

more conveniently Visual-Studio-BOF-template

「🧊」Ring 3 Rootkit for Windows 10

A more reliable way of resolving syscall numbers in Windows

Code snippets to add on top of cobalt strike sleepmask kit so that ekko can work in a CFG protected process

Bypass国内主流杀软

Vulnerability analysis and proof of concepts

Use COM Component Bypass UAC,Dll Version

编写一个简单的linux kernel rootkit

Code with Windows Hacker

My shitty attempt at tampering with the callstack based on the work of namazso, SilentMoonWalk, and VulcanRaven

Low-resource .ZIP file writer (store only) suitable for embedded use.

A small x64 library to load dll's into memory.

My shitty attempt at tampering with the callstack based on the work of namazso, SilentMoonWalk, and VulcanRaven

Huorong Internet Security vulnerabilities 火绒安全软件漏洞

Native Syscalls Shellcode Injector

在Windows环境下的进程注入方法：远程线程注入、创建进程挂起注入、反射注入、APCInject、SetWindowHookEX注入

cmd2shellcode