This repo contains a library of Beacon Object Files (BOFs) that can be used in Cobalt Strike. I plan to add more BOFs as time goes on.
This solution uses a modified version of Cobalt Strike/bof-vs repo to fit into a solution.
Each BOF includes unit tests with mocked functions to ensure proper code coverage Notice each BOF has a separate function outside of the main go() that contains all the Windows API calls. This is so that when we unit test we can easily mock the output without having to mock all the Windows APIs functions.
If you would like to test this BOF in a COFF Loader I recommend using my COFF Loader: Ap3x/Coff-Loader or TrustedSec's COFF Loader.
- [] Add CNA files so that they can be imported into Cobalt Strike