Popular repositories

1. ServiceMove-BOF

   New lateral movement technique by abusing Windows Perception Simulation Service to achieve DLL hijacking code execution.

   C 97 19

2. TrustedPath-UACBypass-BOF

   Cobalt Strike beacon object file implementation for trusted path UAC bypass. The target executable will be called without involving "cmd.exe" by using DCOM object.

   C 33 10

3. Quser-BOF

   Cobalt Strike BOF for quser.exe implementation using Windows API

   C 4 1