generate CobaltStrike's cross-platform payload

A post exploitation framework designed to operate covertly on heavily monitored environments

Vmware Hardened VM detection mitigation loader (anti anti-vm)

Fileless lateral movement tool that relies on ChangeServiceConfigA to run command

A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!

HVNC for Cobalt Strike

InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assembly execution as an alternative to Cobalt Strikes traditiona…

Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird + Spawns a sacrificial Process as target process + (ACG+Bloc…

Cobalt Strike HTTPS beaconing over Microsoft Graph API

Collection of Beacon Object Files (BOF) for Cobalt Strike

The Definitive Guide To Process Cloning on Windows

Debugger Anti-Detection Benchmark

Exploitation of process killer drivers

A command line tool for creating malicious outlook rules

Titan: A crappy Reflective Loader written in C and assembly for Cobalt Strike. Redirects DNS Beacon over DoH

Fully functional, from-scratch alternative to the Cobalt Strike Beacon (red teaming tool), offering transparency and flexibility for security professionals and enthusiasts.