Beacon Object File (BOF) that executes shell commands in-process via cmd.exe /c and streams output back to the operator.
Public collection of production BOFs loadable by any C2 that implements the core beacon.h ABI
BOF for Active Directory enumeration via LDAP, users, computers, trusts, delegation, Kerberoastable accounts, and more.
🛡 Enumerate AV, EPP, EDR, and telemetry on Windows hosts using low-noise Cobalt Strike commands for tailored risk-based assessment.
A collection of Beacon Object Files (BOFs) to use with Cobalt Strike
An experimental COFF loader for executing Cobalt Strike Beacon Object Files (BOFs)
BOFs gift wrapped for Havoc
Repository to gather the BOF files I will be developing
SharpDPAPI ported to Cobalt Strike BOFs — 19 self-contained BOFs for DPAPI credential triage
A simple BOF (Beacon Object File) to search files in the system
Automatically Download & Compile Useful BOFs for CS
Cobalt Strike BOF to obtain location data
Cobalt Strike Aggressor Script for identifying security products on Windows hosts — six enumeration methods rated by noise level, from silent in-process BOF to full PowerShell/WMI.
Tool for working with Indirect System Calls in Cobalt Strike's Beacon Object Files (BOF) using SysWhispers3 for EDR evasion
Cobalt Strike BOF to freeze EDR/AV processes and dump LSASS using WerFaultSecure.exe PPL bypass
.NET CLR-Stomping
Webcam capture capability for Cobalt Strike as a BOF, with in-memory download options
COM Hijacking VOODOO
Metamorphic cross-compilation of C++ & C-code to PIC, BOF & EXE.
Add a description, image, and links to the beacon-object-file topic page so that developers can more easily learn about it.
To associate your repository with the beacon-object-file topic, visit your repo's landing page and select "manage topics."