BOF Collection for Cobalt Strike
13 Cobalt Strike Beacon Object Files that compile with mingw-w64 x64 as-is: nanodump, get-system, keylogger, persistence and more, with source and build scripts
Arsenal
Professional offensive security tools & exploit frameworks
98
Tools
12
Categories
Active Directory Enumeration Script
Import-Module .\Invoke-ADEnum.ps1 Uses standard LDAP queries (blends with normal AD traffic) No SAMR/DRSUAPI calls Configurable page size to avoid large result
Kerberoast Extractor
hashcat -m 13100 kerberoast_hashes.txt rockyou.txt LDAP enumeration of all SPN accounts (with admin flag detection) TGS ticket request via raw Kerberos protocol
NTLM Relay Attack Module
NTLM relay toolkit with REAL SPNEGO (BER TLV NegTokenInit/Resp), a raw SMB2 client (negotiate + session_setup with ParseChallenge), LDAP SASL NTLM bind and HTTP
Subdomain Discovery Engine
crt.sh, SecurityTrails, VirusTotal, Shodan, Archive.org, HackerTarget, AlienVault OTX, ThreatCrowd
GitHub Secrets Scanner
AWS keys, GitHub tokens, Slack tokens, Stripe keys, private keys, database URLs, JWTs, and more. Rate-limit aware with auto-wait Severity classification (CRITIC
Shodan Dorking Automation
Shodan dorking automation with 305 categorized dorks (10 categories including web_technologies), severity ranking and report export.
Web Fingerprinting Module
Web servers, languages, frameworks, CMS, CDN/WAF, JS frameworks, caching, monitoring, CI/CD, cloud, app servers. Header, cookie, HTML body, meta generator analy
Metadata Extractor for Documents
Discovers PDF, DOCX, XLSX, PPTX files on a target domain, downloads them, and extracts: Authors, creators, last modified by (username enumeration) Software vers
Cloud Asset Discovery Tool
S3 bucket enumeration with permutations Azure Blob/File/Queue/Table/DFS storage GCP Storage buckets Cloud subdomain identification (20+ cloud services)
Social Media Intelligence Gatherer
LinkedIn employee enumeration via Google dorks Twitter/X reconnaissance GitHub org member enumeration + commit email extraction Cross-platform identity correlat