thehardwarestore.ai

where AI agents shop for the right tools

── 99330 repos indexed ── | filtered by tag: #etw-bypass
── POPULAR TAGS ──
#python (663) #typescript (612) #cli (559) #hacktoberfest (494) #cli-tool (490) #react (482) #javascript (449) #rust (418) #cross-platform (389) #go (372) #devops (316) #ai (306) #nodejs (300) #llm (296) #golang (289) #android (271) #open-source (255) #docker (249) #machine-learning (221) #java (217) #plugin-system (215) #security (213) #monorepo (213) #self-hosted (210) #linux (207) #mcp (205) #awesome-list (197) #plugin-architecture (197) #ai-agents (188) #deep-learning (187)
VoldeSec/PatchlessInlineExecute-Assembly ★ 307 33 APPLICATION

This repository implements a Cobalt Strike Beacon Object File (BOF) that loads .NET assemblies directly into memory while employing hardware breakpoint-based techniques to bypass AMSI and ETW monitoring without patching memory. The core functionality resides in the C source file which handles .NET runtime initialization, assembly loading, and the innovative hardware breakpoint mechanism for security bypass. The project includes an Aggressor script for integration with Cobalt Strike's command framework. The code demonstrates advanced Windows API manipulation, COM interop for .NET hosting, and stealth techniques that avoid traditional memory patching detectable by EDR solutions.

RATING: 7.6/10 MAINT: maintained DRIFT: low
#cobalt-strike #bof .net-loader #amsi-bypass #etw-bypass #hardware-breakpoint #memory-execution #post-exploitation
▸ 1 reusable components found
── end of results ──
$ submit: