Top AI Repos — open-source AI, indexed and scored
Top AI Repos tracks AI repositories on GitHub and answers two different questions about each one: is it moving right now, and would you bet a product on it.
Top AI Repos tracks AI repositories on GitHub and answers two different questions about each one: is it moving right now, and would you bet a product on it.
[ BOF-LAUNCHER ] -> an API for loading, executing and in-memory masking BOFs on Windows and Linux for use in C/Zig/Go/Rust agents/implants. [ Z-BEAC0N ] -> a custom-written stage-1 (aka pre-C2) solution engineered with a small footprint, stealth and modularity in mind. [ DEVELOPED BOFS ] -> cross-platform (12), Linux-only (10), Win-only (2)
| Date | Stars |
|---|---|
| 2026-07-31 | 331 |
| 2026-08-06 | 331 |
Today
— stars today
This week
— stars this week
This month
— stars this month
Momentum
0.0
growth rate 0.00%/day
# Introduction [Cobalt Strike 4.1](https://www.cobaltstrike.com/blog/cobalt-strike-4-1-the-mark-of-injection/) released on 25 June 2020, introduced a novel (for that time) capability of running so called [Beacon Object Files](https://hstechdocs.helpsystems.com/manuals/cobaltstrike/current/userguide/content/topics/beacon-object-files_main.htm) - *small post-ex capabilities that execute in [Beacon](https://www.cobaltstrike.com/), parse arguments, call a few Win32 APIs, report output, and exit*. Since that time BOFs became very popular and the demand to launch/execute them in other environments than [Cobalt Strike's Beacon](https://www.cobaltstrike.com/) has emerged. We at [Z-Labs](https://z-labs.eu) saw a big potential in BOFs and decided to extend its capabilities, versatility and usefulness even further. That's how the following projects came to live. The repository provides: 1. [bof-launcher](#bof-launcher-library) - programming library for BOFs in-memory management (loading, keeping track of loaded BOFs, execution, masking). 2. [z-beac0n](#z-beac0n) - a custom-written stage-1 (aka pre-C2) solution featuring bof-launcher. Engineered with a small footprint, stealth and modularity in mind. 3. [Z-Labs BOFs collection](#z-Labs-bofs-collection) - growing collection of OS-specific and cross-platform BOFs for usage during a red team engagements. See [here](#building-all-components) for bulding instructions. # bof-launcher library <p align="center"> <img src="https://github.com/The-Z-Labs/bof-launcher/assets/4785347/990ad1fb-c35b-48cf-a0db-aed3c825d149" width="192" height="192" /> </p> BOF launcher library is the engine behind the [z-beac0n](examples/implant) adversary simulation toolkit. It is a standalone programming library implemented in Zig and C that can be used to execute BOFs. On Windows it support x86 and x86_64 architectures, on Linux x86, x86_64, ARMv6+ and AArch64 architectures are supported. The library exposes either [C API](bof-launcher/src/bof_launcher_api.h) and [Zig API](bof-launcher/src/bof_launcher_api.zig). Library features: - Capable of running [BOFs](https://hstechdocs.helpsystems.com/manuals/cobaltstrike/current/userguide/content/topics/beacon-object-files_main.htm) that adhere to [Windows BOF template](https://github.com/Cobalt-Strike/bof_template) and [Linux BOF template](https://github.com/outflanknl/nix_bof_template). - Fully integrable with programs written in C/C++/Zig/Go or Rust. See [examples](examples/) for sample integrations. - Adds capability to write BOFs in [Zig programming language](https://ziglang.org/) - which is a low-level langauge with a goal of being a "better C". - Access to [rich std library](https://ziglang.org/documentation/0.15.2/std/) during BOF development: lists, hash maps, cross-platform OS layer, http, networking, threading, crypto and compression. - Capability to implement cross-platform BOFs (see: [udpScanner]((bofs/src/udpScanner.zig)), [tcpScanner]((bofs/src/tcpScanner.zig)), [grep]((bofs/src/grep.zig)) and various other BOFs). - Provides modern sleepmasking functionality. - Capability to run asynchronous or long-running BOFs in a separate thread. - Pattern for launching more risky BOFs (i.e. privilege escalation exploits) inside of a sacrificial process. - Seamless support for either Windows COFF and UNIX/Linux ELF formats. - ARM and AARCH64 support on Linux. - Flexible [API](bof-launcher/src/bof_launcher_api.h) allowing for BOF chaining (works like `Bash` pipes but purely in-memory) both on Linux and Windows. bof-launcher C API: ```c int bofLauncherInit(void); void bofLauncherRelease(void); int bofMemoryMaskKey(const unsigned char* key, int key_len); int bofMemoryMaskWin32ApiCall(const char* win32_api_name, int masking_enabled); int bofObjectInitFromMemory(const unsigned char* file_data_ptr, int file_data_len, BofObjectHandle* out_bof_handle); void bofObjectRelease(BofObjectHandle bof_handle); int bofObjectIsValid(BofObjectHandle bof_handle); void* bofOb
Excerpt of 11,190 characters
Read on GitHubWould you bet a product on this? Bounded 0–100 and slow moving.
matched fp:a9a1131fe59c8385, topic:red-teaming