Popular repositories Loading

1. MemLoader MemLoader Public

   Run native PE or .NET executables entirely in-memory. Build the loader as an .exe or .dll—DllMain is Cobalt Strike UDRL-compatible

   C++ 260 38

2. KrakenMask KrakenMask Public

   Sleep obfuscation

   C++ 259 35

3. Draugr Draugr Public

   BOF with Synthetic Stackframe

   C++ 211 30

4. BOF_RunPe BOF_RunPe Public

   BOF to run PE in Cobalt Strike Beacon without console creation

   C++ 173 27

5. BOF_ExecuteAssembly BOF_ExecuteAssembly Public

   Beacon Object File for Cobalt Strike that executes .NET assemblies in beacon with evasion techniques.

   C++ 171 24

6. Svartalfheim Svartalfheim Public

   Stage 0

   C++ 169 34