CVE-2024-26229-BOF

CVE-2024-26229 BOF Beacon Object File implementation of CVE-2024-26229 — Windows CSC driver local privilege escalation via DKOM token theft. Based on RalfHacker/CVE-2024-26229-exploit, converted to BOF with Dynamic Function Resolution DFR for use with C2 frameworks that support the Cobalt Strike...

amd-ryzen-master-driver-v17-exploit

Cobalt Strike Beacon Object File for kernel exploitation using AMD's Ryzen Master Driver version 17. Built by Tijme. Credits to Alex for teaching me! Made possible by Northwave Security Description This is a Cobalt Strike CS Beacon Object File BOF and executable which exploits AMD's Ryzen Master...

RawHive

RawHive RawHive is a Cobalt Strike BOF for pulling selected Windows registry hives straight from a raw NTFS volume. It skips the normal file APIs, walks NTFS metadata to find the target file records, and reads the bytes directly from disk. Targets: C:\Windows\System32\config\SAM...

RegPwnBOF

RegPwn BOF Cobalt Strike BOF port of the RegPwn exploit by Filip Dragovic @Wh04m1001 / MDSec ActiveBreach. This is a sloppy BOF reimplementation of the original C exploit. All credit for the vulnerability research and exploit goes to Filip Dragovic and MDSec. Blog post :...

CVE-2020-0796-BOF

This is Raphael's tinkering around with the SMBGhost LPE. I started with the source code from the Metasploit Framework: cve-2020-0796: SMBv3 Compression Buffer Overflow SMBGhost CVE 2020-0796 https://github.com/rapid7/metasploit-framework/tree/master/external/source/exploits/CVE-2020-0796 BSD...

kernel-mii

Cobalt Strike Beacon Object File foundation for kernel exploitation using CVE-2021-21551. Built by Tijme. Credits to Alex for teaching me! Made possible by Northwave Security Description This is a Cobalt Strike CS Beacon Object File BOF which exploits CVE-2021-21551. It only overwrites the beacon...

CVE-2026-49176_BOF

CVE-2026-49176 Cobalt Strike BOF Cobalt Strike Beacon Object File BOF for local privilege escalation via Windows WalletService CVE-2026-49176 , fixed July 2026. From a medium-integrity standard user Beacon, this tool stages a malicious Wallet ESE database, redirects Documents, triggers...

spawn

SPAWN - BOF de Cobalt Strike BOF de Cobalt Strike que crea un proceso sacrificial, lo inyecta con shellcode y ejecuta el payload. Construido para evadir hooks de EDR/UserLand al crear un proceso sacrificial con Arbitrary Code Guard ACG, BlockDll y suplantación de PPID. Debido a ACG, esto no es...