beacon-object-file 开源项目推荐（19 个）

tijme /dittobytes

Metamorphic cross-compilation of C++ & C-code to PIC, BOF & EXE.

nickvourd /COM-Hunter

COM Hijacking VOODOO

CodeXTF2 /WebcamBOF

Webcam capture capability for Cobalt Strike as a BOF, with in-memory download options

nettitude /CLR-Stomp

.NET CLR-Stomping

0xsh3llf1r3 /ColdWer

Cobalt Strike BOF to freeze EDR/AV processes and dump LSASS using WerFaultSecure.exe PPL bypass

tdeerenberg /InlineWhispers3

Tool for working with Indirect System Calls in Cobalt Strike's Beacon Object Files (BOF) using SysWhispers3 for EDR evasion

VirtualAlllocEx /CS-EDR-Enumeration

Cobalt Strike Aggressor Script for identifying security products on Windows hosts — six enumeration methods rated by noise level, from silent in-process BOF to full PowerShell/WMI.

kamalx06 /TornadoC2

Pull-based C2 framework with ten native transports, concurrent multi-profile handlers, and end-to-end ECDSA-signed tasking. Single Go binary agent with every property baked in at build time. Multi-operator team server with RBAC, audit chain, and a Qt/CLI console. Linux + Windows, amd64 + arm64.

CodeXTF2 /GeoLocation_BOF

Cobalt Strike BOF to obtain location data

nickvourd /Weaponize-CobaltStrike

Automatically Download & Compile Useful BOFs for CS

MaorSabag /fileSearcher

A simple BOF (Beacon Object File) to search files in the system

Bhanunamikaze /DPAPI_BOF

SharpDPAPI ported to Cobalt Strike BOFs — 19 self-contained BOFs for DPAPI credential triage

Lavender-exe /BofCollection

BOFs gift wrapped for Havoc

ricardojoserf /BOF_Files

Repository to gather the BOF files I will be developing

soheil-01 /coff_loader

An experimental COFF loader for executing Cobalt Strike Beacon Object Files (BOFs)

qmadev /BOF-Collection

A collection of Beacon Object Files (BOFs) to use with Cobalt Strike

rubyattack3r /Rex-BOF

Native x86/x64 BOFs for authorized Windows remote execution in Cobalt Strike and Sliver

sebafvs /bof-collection

Public collection of production BOFs loadable by any C2 that implements the core beacon.h ABI

sebafvs /bof-shell

Beacon Object File (BOF) that executes shell commands in-process via cmd.exe /c and streams output back to the operator.