MemProcFS

Simple (relatively) things allowing you to dig a bit deeper than usual.

WinDivert: Windows Packet Divert

Research code & papers from members of vx-underground.

LoadLibrary for offensive operations

A protective and Low Level Shellcode Loader that defeats modern EDR systems.

A .NET Runtime for Cobalt Strike's Beacon Object Files

Various Cobalt Strike BOFs

Collection of remote authentication triggers in C#

Inject .NET assemblies into an existing process

Print Spooler Named Pipe Impersonation for Cobalt Strike

BOF implementation of the research by @jonasLyk and the drafted PoC from @LloydLabs

A BOF to parse the imports of a provided PE-file, optionally extracting symbols on a per-dll basis.

Collection of BOFs for Cobalt Strike