unhook-bof
Remove API hooks from a Beacon process.
AI summary
Process hook remover
Removes API hooks from a malicious process
- stars
- 54
- forks
- 16
- watching
- 1
Similar projects
Found by comparing what the projects do, not just their names.
API hook remover
Tool to remove API hooks from a Beacon process.
boku7/spawn440
Process spawner
A Cobalt Strike Beacon tool that spawns a sacrificial process to execute shellcode, using techniques like Arbitrary Code Guard and PPID spoofing to evade detection.
System info BOF
A Cobalt Strike Beacon Object File (BOF) that uses custom syscaller code to make direct system calls to retrieve process information on the target system.
Cobalt strike payloads
Beacon object files for Cobalt Strike
BOF executable generator
A Beacon Object File Visual Studio template project for creating malicious code executables
Beacon utilities
Utilities for Cobalt Strike's Beacon Object Files to simplify working with shellcode and system processes
Beacon masking
A proof-of-concept project demonstrating how to mask Beacon's payload execution in Cobalt Strike while executing a user-provided BOF.
BOF tool
A Cobalt Strike BOF that exploits a vulnerability to add an admin user
Cobalt Strike BOFs
A collection of Cobalt Strike Beacon Objectives (BOFs) that perform various tasks such as domain information retrieval, clipboard data extraction, WiFi enumeration, port scanning, and registry persistence.
Malicious connection maker
A Cobalt Strike beacon implementation in Rust for creating malicious network connections
Beacon hunter
Tool to hunt and mine Cobalt Strike beacons from internet-connected services
Beacon analyzer
Detects and analyzes Cobalt Strike beacons by analyzing HTTP responses and extracting configuration information.
Beacon objects
A collection of beacon object files designed to be used in a remote access tool like Cobalt Strike.
Payload loader
Loads and executes a malicious payload in a Windows system using PowerShell.
BOF handler
An implementation of in-house CoffLoader supporting CobaltStrike standard BOF and BSS initialized variables.
