DropSpawn_BOF
by Octoberfest7
CobaltStrike BOF to spawn Beacons using DLL Application Directory Hijacking
AI summary
DLL hijacker
A CobaltStrike payload that uses DLL hijacking to spawn additional Beacons on Windows systems
- stars
- 219
- forks
- 26
- watching
- 5
Similar projects
Found by comparing what the projects do, not just their names.
DLL Hijacker
A tool that exploits a Windows vulnerability to execute arbitrary code on remote systems using a technique called DLL hijacking.
Session hijacker
A tool for hijacking remote RDP sessions using the WinStationConnect API
Privilege escalation tool
A tool that allows an attacker to elevate privileges and gain control over the Windows Defender service
Windows privilege escalation exploit
An exploit tool for a Windows vulnerability allowing an attacker to run arbitrary code as SYSTEM on Windows 10 and Windows 11
System info BOF
A Cobalt Strike Beacon Object File (BOF) that uses custom syscaller code to make direct system calls to retrieve process information on the target system.
Payload loader
Loads and executes a malicious payload in a Windows system using PowerShell.
Memory injector
A tool for injecting malware into processes by mapping it to memory without registering it with the kernel.
BOF tool
A Cobalt Strike BOF that exploits a vulnerability to add an admin user
boku7/spawn440
Process spawner
A Cobalt Strike Beacon tool that spawns a sacrificial process to execute shellcode, using techniques like Arbitrary Code Guard and PPID spoofing to evade detection.
Process hook remover
Removes API hooks from a malicious process
System hive dumper
Exploits SeBackupPrivilege to dump remote system hives and credentials.
BOF executable generator
A Beacon Object File Visual Studio template project for creating malicious code executables
Beacon runner
An inline execution suite for CobaltStrike Beacons to load and run unmanaged Windows executables.
DLL Search Enumerator
A tool to enumerate the search order of DLL resolution and potentially gain information about a file's mutability.
UAC bypass tool
A tool that bypasses UAC restrictions on Windows by deserializing and executing malicious code in Event Viewer.
