From dab96734ec84a7d2abd9ffe94856b3c72bb83631 Mon Sep 17 00:00:00 2001 From: pe3zx Date: Mon, 19 Jul 2021 08:55:59 +0700 Subject: [PATCH] Add: boku7/bof-spawnSuspendedProcess to Execution section --- Offensive.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/Offensive.md b/Offensive.md index aef165e..dae1a48 100644 --- a/Offensive.md +++ b/Offensive.md @@ -199,6 +199,10 @@ Some tools can be categorized in more than one category. But because the current bohops/GhostBuild GhostBuild is a collection of simple MSBuild launchers for various GhostPack/.NET projects + + boku7/bof-spawnSuspendedProcess + Cobalt Strike Beacon Object File (BOF) that takes the name of of a PE file as an argument and spawns the process in a suspended state + bytecode77/self-morphing-csharp-binary Executable that mutates its own code