whereami
by boku7
Cobalt Strike Beacon Object File (BOF) that uses handwritten shellcode to return the process Environment strings without touching any DLL's.
AI summary
Environment extractor
A tool that extracts environment variables from a process without touching system DLLs using hand-crafted shellcode
- stars
- 160
- forks
- 28
- watching
- 4
Similar projects
Found by comparing what the projects do, not just their names.
Shellcode injector
A tool that enables remote process shellcode execution using the Early Bird injection technique
Process enumerator
An exploit tool that uses direct system calls to enumerate processes based on specific loaded modules or process handles
Registry extractor
Creates a tool to extract registry keys from Windows systems using a Beacon Object File
Process spawner
A Cobalt Strike Beacon tool that spawns a sacrificial process to execute shellcode, using techniques like Arbitrary Code Guard and PPID spoofing to evade detection.
System info BOF
A Cobalt Strike Beacon Object File (BOF) that uses custom syscaller code to make direct system calls to retrieve process information on the target system.
Code extractor
An application designed to detect and extract hidden code from malicious Windows executables.
String extractor
An extension for Burp Suite to identify and extract interesting strings from web pages
ETW bypass tool
Tool to bypass ETW (Event Tracing for Windows) security measure in remote processes by injecting a custom syscall
BOF executable generator
A Beacon Object File Visual Studio template project for creating malicious code executables
Text extractor
A framework for extracting information from unannotated text using large language models
Request Extractor
An extension for Burp Suite to extract parameters and endpoints from requests to create custom wordlists for testing
Pipe information viewer
This tool lists active Windows pipes and returns their owners and DACL permissions
Module doc extractor
A tool to extract and format documentation from Ansible modules.
Process hook remover
Removes API hooks from a malicious process
Environment capturer
A Clojure library that captures and restores the local environment of a piece of code to simplify debugging
