antirookit Goto Github PK

bitwardendecryptbrute

Wordlist attacks on Bitwarden data.json files

bof-adopt

BOF implementation of Adopt. Spawns a process from a process. Can sometimes be used to run a session > 0 process from session 0.

bof-pack-1

A care package of useful bofs for red team engagments

bof.net

A .NET Runtime for Cobalt Strike's Beacon Object Files

bof2shellcode

POC tool to convert CobaltStrike BOF files to raw shellcode

bokuloader

Cobalt Strike User-Defined Reflective Loader written in Assembly & C for advanced evasion capabilities. By: @0xBoku & @s4ntiago_p

c-plus-plus

Collection of various algorithms in mathematics, machine learning, computer science and physics implemented in C++ for educational purposes.

c-to-shellcode-examples

c2-tool-collection

A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.

callmewin32kdriver

Load your driver like win32k.sys

callobfuscator

Obfuscate specific windows apis with different apis

callstack-spoofer

This tool will allow you to spoof the return addresses of your functions as well as system functions.

callstackspoofer

A PoC implementation for spoofing arbitrary call stacks when making sys calls (e.g. grabbing a handle via NtOpenProcess)

candypotato

Pure C++, weaponized, fully automated implementation of RottenPotatoNG

carboncopy

A tool which creates a spoofed certificate of any online website and signs an Executable for AV Evasion. Works for both Windows and Linux

certipy

Tool for Active Directory Certificate Services enumeration and abuse

chainsaw

Rapidly Search and Hunt through Windows Event Logs

chameleon

PowerShell Script Obfuscator

cheeseounce

Coerce Windows machines auth via MS-EVEN

cheesetools

Self-developed tools for Lateral Movement/Code Execution

chunk-proxy

cinject

Windows Kernel inject (no module no thread)

cipher

cipher for sha1/sha256/sha224/sha512/sha384 md5 hmac aes 3des pbkdf2 rsa digest.

cmstplua-uac-bypass

Cobalt Strike Beacon Object File for bypassing UAC via the CMSTPLUA COM interface.

cobalt-arsenal

My collection of battle-tested Aggressor Scripts for Cobalt Strike 4.0+

cobaltbus

Cobalt Strike External C2 Integration With Azure Servicebus, C2 traffic via Azure Servicebus

cobaltstrike-headless

Aggressorscript that turns the headless aggressor client into a (mostly) functional cobalt strike client.

cobaltstrike_bofs

My CobaltStrike BOFS

codecepticon

coercer

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 9 methods.