"findobjects bof cobalt strike beacon" — Tools

CVE-2026-49176_BOF

777erp/cve-2026-49176_bof

CVE-2026-49176 WalletService LPE — standalone PoC + Cobalt Strike BOF (SYSTEM command on interactive session)

exploitationpayload-developmentpost-exploitation+2

tgt-monitor-bof

jakobfriedl/tgt-monitor-bof

Async BOF to automatically extract or renew Kerberos TGTs on a target system.

authenticationlateral-movementpayload-development+3

1351 month ago

DNSRPC-BOF

paradoxis/dnsrpc-bof

Beacon Object File (BOF) implementation of the dnscmd.exe functionality used to obtain remote code execution on an ADIDNS server by exploiting the…

exploitationpayload-developmentpenetration-testing+2

501 month ago

trustme

meowmycks/trustme

BOF to impersonate TrustedInstaller via DISM API trigger and thread impersonation

command-and-controlexploitationimpersonation-tools+4

1365 months ago

lsawhisper-bof

dazzyddos/lsawhisper-bof

A Beacon Object File (BOF) that talks directly to Windows authentication packages through the LSA untrusted/trusted client interface, without…

authenticationcommand-and-controlexploitation+4

2986 months ago

pybof

rkbennett/pybof

Python module for running BOFs

penetration-testingpost-exploitationred-teaming

809 months ago

BOF_RunPe

ntdallas/bof_runpe

BOF to run PE in Cobalt Strike Beacon without console creation

memory-forensicspost-exploitationred-teaming+1

2009 months ago

ADSyncDump-BOF

paradoxis/adsyncdump-bof

The ADSyncDump BOF is a port of Dirk-Jan Mollema's adconnectdump.py / ADSyncDecrypt into a Beacon Object File (BOF) with zero dependencies.

cloud-securityencryption-decryption-toolsidentity-access-management+3

1820 years ago

WindowSpy

codextf2/windowspy

Cobalt Strike Beacon Object File for automated, targeted user surveillance. Triggers screenshots or custom actions when specific window titles (e.g.,…

post-exploitationred-teaming

2871 year ago

SpawnWith

rasta-mouse/spawnwith

Cobalt Strike BOF that spawns a process using another user's token and injects Beacon shellcode, enabling post-exploitation and lateral movement via…

command-and-controlimpersonation-toolslateral-movement+2

1131 year ago

Archived

CVE-2024-35250-BOF

yinsel/cve-2024-35250-bof

CVE-2024-35250 的 Beacon Object File (BOF) 实现。

exploitationpayload-developmentpenetration-testing+3

241 year ago

CVE-2024-35250-BOF

ro0tmylove/cve-2024-35250-bof

Cobalt Strike 的 CVE-2024-35250 的 BOF。(请给我加个星，谢谢。)

binary-exploitationexploitationexploit-frameworks+3

131 year ago

CVE-2024-26229-BOF

apkc/cve-2024-26229-bof

BOF implementations of CVE-2024-26229 for Cobalt Strike and BruteRatel

binary-exploitationexploitationexploit-frameworks+5

292 years ago

Aggressor-Aggregator

gmh5225/aggressor-aggregator

A helper script for consolidating Aggressor and BOF repositories into a single CNA for Cobalt Strike.

penetration-testing-frameworksred-teamingscripting-automation

2 years ago

kernel-mii

tijme/kernel-mii

Cobalt Strike (CS) Beacon Object File (BOF) foundation for kernel exploitation using CVE-2021-21551.

exploit-frameworkspayload-developmentpenetration-testing+2

853 years ago

FindObjects-BOF

outflanknl/findobjects-bof

A Cobalt Strike Beacon Object File (BOF) project which uses direct system calls to enumerate processes for specific loaded modules or process handles.

command-and-controlpenetration-testingpost-exploitation+1

2733 years ago

WdToggle

outflanknl/wdtoggle

A Beacon Object File (BOF) for Cobalt Strike which uses direct system calls to enable WDigest credential caching.

exploit-frameworkspost-exploitationred-teaming

2183 years ago

Elevate-System-Trusted-BOF

mr-un1k0d3r/elevate-system-trusted-bof

Cobalt Strike Beacon Object File that elevates an active beacon to SYSTEM and grants TrustedInstaller privileges through SetThreadToken token…

command-and-controlpayload-developmentpost-exploitation+2

1813 years ago