Skip to content
Change the repository type filter

All

    Repositories list

    • BusyBOF

      Public
      Busybox-style Beacon Object Files for *nix post-exploitation. Reimplements common Unix utilities as BOFs for use in stripped environments (Docker containers, Ku…
      C
      GNU General Public License v3.0
      92700Updated Jun 14, 2026Jun 14, 2026
    • Recursive downloading of files in a specific directory and its sub-directories
      Python
      Apache License 2.0
      0800Updated Mar 26, 2026Mar 26, 2026
    • Filesystem interaction via firebeam virtual machine execution
      Python
      Apache License 2.0
      65800Updated Mar 26, 2026Mar 26, 2026
    • async beacon object file for notification on process creation
      C
      21700Updated Mar 24, 2026Mar 24, 2026
    • C
      GNU General Public License v2.0
      1741000Updated Mar 24, 2026Mar 24, 2026
    • Situational Awareness commands implemented using Beacon Object Files
      C
      GNU General Public License v2.0
      2951300Updated Mar 24, 2026Mar 24, 2026
    • Havoc Professional backend plugin to allow ingesting of events and logs to Ghostwriter
      Go
      Apache License 2.0
      01600Updated Feb 25, 2026Feb 25, 2026
    • havoc-sdk

      Public
      Havoc Software Development Kit
      C++
      0600Updated Feb 25, 2026Feb 25, 2026
    • BOF for Kerberos abuse (an implementation of some important features of the Rubeus).
      C
      77900Updated Jan 5, 2026Jan 5, 2026
    • Collection of UAC Bypass Techniques Weaponized as BOFs
      C
      GNU General Public License v3.0
      802200Updated Jan 5, 2026Jan 5, 2026
    • Cobalt Strike Beacon Object File for bypassing UAC via the CMSTPLUA COM interface.
      C
      MIT License
      29100Updated Jan 5, 2026Jan 5, 2026
    • A BOF that runs unmanaged PEs inline
      C
      MIT License
      88300Updated Jan 5, 2026Jan 5, 2026
    • C++
      MIT License
      19100Updated Jan 5, 2026Jan 5, 2026
    • A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.
      C
      215300Updated Jan 5, 2026Jan 5, 2026
    • nanodump

      Public
      The swiss army knife of LSASS dumping
      C
      MIT License
      2711400Updated Jan 4, 2026Jan 4, 2026
    • small example of logging all user logons using async beacon object files
      C
      0800Updated Dec 7, 2025Dec 7, 2025
    • generate kaine advanced network profiles from cobalt strike C2 profiles
      Python
      0400Updated Dec 7, 2025Dec 7, 2025
    ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.