Shellcode capable of bypassing EAF / IAF mitigations

Porting of NPPSPY by Grzegorz Tworek to 'man in the middle' the user logon process, and store the user's name and password in an unassuming file.

A small set of Beacon Object Files (BOFs) that I developed over the time with a Magic: The Gathering theme.

异步Beacon Object Files概念的实现。它提供了一个框架，用于运行可以检测事件并报告回Cobalt Strike团队服务器的异步监控任务。

Collection of loaders

渗透测试人员可以通过此BOF，将非托管 Windows可执行文件加载到Beacon内存中并执行它们，检索输出并将其呈现在 Beacon 控制台中

PrivCheck is a collection of Beacon Object Files designed to detect privilege escalation vulnerabilities in Windows OS by identifying common misconfigurations.

Cobalt Strike BOF projects

Abuses the Shared Logon Session ID Issue (Described [here](https://www.tiraniddo.dev/2020/04/sharing-logon-session-little-too-much.html) by the awesome James Forshaw) To Achieve System From Network…

Clear Event Logs

Gets logged on users on a remote machine using remote registry enumeration.

Injecting Mimikatz in a remote process and jumping into it's entry by using PE Hollowing technique.

Cobalt Strike Beacon Object Files