{"uuid": "eb6bf6e9-f9ab-4a60-872c-d66e725b53b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0796", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/29967", "content": "\ud83d\udd25 Advanced Red Team Tools \u2014 Top 20 BOF Repositories\n\nIn-Memory Beacon Object File (BOF) Modules for Red Teams\n\nThis is a curated list of 20 hidden or lesser-known BOF repositories on GitHub.\nBOFs are lightweight in-memory modules designed to run inside C2 agents such as Cobalt Strike, Havoc, or Adaptix, allowing Red Teams to extend post-exploitation capabilities without dropping full executables.\n\n\ud83d\udccc Purpose:\n\u2022 System enumeration\n\u2022 Credential collection\n\u2022 Process and memory analysis\n\u2022 Privilege escalation research\n\u2022 Firewall, clipboard, and network utility functions\n\n\ud83d\udccc Top 20 BOF GitHub Repositories\n1\ufe0f\u20e3 Cobalt\u2011Strike/bof_template \u2014 Official BOF template & examples\n\ud83d\udc49 https://github.com/Cobalt-Strike/bof_template\n\n2\ufe0f\u20e3 REDMED\u2011X/OperatorsKit \u2014 BOF module kit for post-exploitation tasks\n\ud83d\udc49 https://github.com/REDMED-X/OperatorsKit\n\n3\ufe0f\u20e3 hrtywhy/BOF\u2011CobaltStrike \u2014 Collection of useful BOF modules\n\ud83d\udc49 https://github.com/hrtywhy/BOF-CobaltStrike\n\n4\ufe0f\u20e3 CS\u2011Situational\u2011Awareness\u2011BOF \u2014 Situational awareness BOF modules\n\ud83d\udc49 https://github.com/trustedsec/CS-Situational-Awareness-BOF\n\n5\ufe0f\u20e3 N7WEra/BofAllTheThings \u2014 Comprehensive BOF collection\n\ud83d\udc49 https://github.com/N7WEra/BofAllTheThings\n\n6\ufe0f\u20e3 Cobalt\u2011Strike/bof\u2011vs \u2014 Visual Studio BOF template\n\ud83d\udc49 https://github.com/Cobalt-Strike/bof-vs\n\n7\ufe0f\u20e3 ricardojoserf/BOF_Files \u2014 Personal BOF module collection\n\ud83d\udc49 https://github.com/ricardojoserf/BOF_Files\n\n8\ufe0f\u20e3 Lavender\u2011exe/BofCollection \u2014 Havoc-compatible BOF collection\n\ud83d\udc49 https://github.com/Lavender-exe/BofCollection\n\n9\ufe0f\u20e3 soheil\u201101/coff_loader \u2014 COFF/BOF loader experiments\n\ud83d\udc49 https://github.com/soheil-01/coff_loader\n\n1\ufe0f\u20e30\ufe0f\u20e3 TrustedSec/ZeroLogon\u2011BOF \u2014 ZeroLogon exploit BOF example\n\ud83d\udc49 https://github.com/TrustedSec/ZeroLogon-BOF\n\n1\ufe0f\u20e31\ufe0f\u20e3 TrustedSec/CVE\u20112020\u20110796\u2011BOF \u2014 SMBv3 vulnerability BOF example\n\ud83d\udc49 https://github.com/TrustedSec/CVE-2020-0796-BOF\n\n1\ufe0f\u20e32\ufe0f\u20e3 Cobalt\u2011Strike/unhook\u2011bof \u2014 Beacon API unhook BOF module\n\ud83d\udc49 https://github.com/Cobalt-Strike/unhook-bof\n\n1\ufe0f\u20e33\ufe0f\u20e3 wsummerhill/CobaltStrike_BOF_Collections \u2014 Legacy BOF module collection\n\ud83d\udc49 https://github.com/wsummerhill/CobaltStrike_BOF_Collections\n\n1\ufe0f\u20e34\ufe0f\u20e3 Boku7/xPipe \u2014 Pipe information BOF utility (from BofAllTheThings)\n\ud83d\udc49 https://github.com/N7WEra/BofAllTheThings/tree/master/xPipe\n\n1\ufe0f\u20e35\ufe0f\u20e3 DallasFR/Cobalt\u2011Clip \u2014 Clipboard monitoring BOF (from BofAllTheThings)\n\ud83d\udc49 https://github.com/N7WEra/BofAllTheThings/tree/master/Clipboard\n\n1\ufe0f\u20e36\ufe0f\u20e3 EspressoCake/Firewall_Walker_BOF \u2014 Windows Firewall BOF module\n\ud83d\udc49 https://github.com/N7WEra/BofAllTheThings/tree/master/Firewall_Walker\n\n1\ufe0f\u20e37\ufe0f\u20e3 EspressoCake/Process_Protection_Level_BOF \u2014 Process Protection Level BOF\n\ud83d\udc49 https://github.com/N7WEra/BofAllTheThings/tree/master/Process_Protection_Level\n\n1\ufe0f\u20e38\ufe0f\u20e3 trainr3kt/NoteThief \u2014 Notepad unsaved data capture BOF\n\ud83d\udc49 https://github.com/N7WEra/BofAllTheThings/tree/master/NoteThief\n\n1\ufe0f\u20e39\ufe0f\u20e3 jsecu/CredManBOF \u2014 Credential Manager BOF module\n\ud83d\udc49 https://github.com/N7WEra/BofAllTheThings/tree/master/CredManBOF\n\n2\ufe0f\u20e30\ufe0f\u20e3 xforcered/CredBandit \u2014 Memory process dump BOF module\n\ud83d\udc49 https://github.com/N7WEra/BofAllTheThings/tree/master/CredBandit\n\n\ud83e\udde0 Quick Notes\n\u2022 Most of these BOFs are Cobalt Strike-focused, but several are compatible with Havoc and other C2 frameworks.\n\u2022 BOFs are executed in-memory, reducing disk artifacts and improving stealth.\n\u2022 These modules cover tasks like credential harvesting, system enumeration, privilege escalation, and network/endpoint exploration.\n\n\ud83d\udccd Explore more BOF repos:\nGitHub topic: https://github.com/topics/beacon-object-file\n\n\ud83d\udca1 Red Team Insight\nBOFs allow Red Teams to rapidly extend agent functionality while minimizing forensic traces.\nA well-curated BOF toolkit improves post-exploitation efficiency, stealth, and modular attack workflow.\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:23.844496Z"}