{"adoption": {"forks": 273, "observed_at": "2026-08-28T04:04:42.960105+00:00", "stars": 1431}, "canonical_url": "https://ross.abutalabs.com/products/bokuloader", "card": {"archived": false, "artifact_type": "library", "description": "A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!", "domain": ["security", "penetration-testing", "developer-tools"], "enriched": true, "function": ["security", "cryptography", "developer-tools"], "health_score": 20, "homepage": null, "language": "C", "license": "MIT", "license_family": "permissive", "maturity": "active", "member_repos": ["boku7/BokuLoader"], "name": "boku7/BokuLoader", "platform": ["windows", "cpp"], "pushed_at": "2023-11-22T22:25:50+00:00", "repo": "boku7/BokuLoader", "stars": 1431, "tags": ["red-team", "cobalt-strike", "reflective-loader", "evasion", "offensive-security", "udrl", "callstack-spoofing", "syscalls"], "topics": ["boku", "cobaltstrike", "redteam", "reflectiveloader", "advsim"], "urls": [], "use_cases": ["build a custom user-defined reflective loader for Cobalt Strike beacons", "evade EDR detection with reflective callstack spoofing", "use indirect NT syscalls for memory protection changes", "load beacon DLL without copying PE headers into memory", "resolve DLLs and function symbols without LoadLibraryA or GetProcAddress", "obfuscate strings in the loader with Caesar cipher", "learn red team loader development techniques"], "what_it_is": "BokuLoader is a proof-of-concept User-Defined Reflective Loader (UDRL) for Cobalt Strike written in C and assembly. It recreates, integrates, and enhances Cobalt Strike's evasion features such as reflective callstack spoofing, indirect NT syscalls, and string obfuscation for red team operations.", "when_to_avoid": ["you do not have a licensed Cobalt Strike installation, since it is a UDRL for that platform", "you need a production-grade, fully supported loader without testing across compiler, OS, and Java versions", "your use case is defensive research unrelated to offensive tooling"], "when_to_choose": ["you run a Cobalt Strike red team engagement and need stronger evasion than the built-in loader", "you want a reference implementation to build your own in-house UDRL", "you need callstack spoofing, indirect syscalls, and header stomping in one loader"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/bokuloader", "repo": "boku7/BokuLoader", "role": "main", "score": 32}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:04:42.960105+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T04:37:05.972563+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "7edc76ad1e36ac974dbe00c9be3b594169463715c67a09a8c3eb6c0c8bd01912", "fetched_at": "2026-08-28T04:04:42.960105+00:00", "kind": "readme", "missing": false, "url": "https://github.com/boku7/BokuLoader"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:04:42.960105+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T04:37:05.972563+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "7edc76ad1e36ac974dbe00c9be3b594169463715c67a09a8c3eb6c0c8bd01912", "fetched_at": "2026-08-28T04:04:42.960105+00:00", "kind": "readme", "missing": false, "url": "https://github.com/boku7/BokuLoader"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T04:37:05.972563+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "7edc76ad1e36ac974dbe00c9be3b594169463715c67a09a8c3eb6c0c8bd01912", "fetched_at": "2026-08-28T04:04:42.960105+00:00", "kind": "readme", "missing": false, "url": "https://github.com/boku7/BokuLoader"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:04:42.960105+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:04:42.960105+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:04:42.960105+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T04:37:05.972563+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "7edc76ad1e36ac974dbe00c9be3b594169463715c67a09a8c3eb6c0c8bd01912", "fetched_at": "2026-08-28T04:04:42.960105+00:00", "kind": "readme", "missing": false, "url": "https://github.com/boku7/BokuLoader"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:04:42.960105+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:04:42.960105+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T04:37:05.972563+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "7edc76ad1e36ac974dbe00c9be3b594169463715c67a09a8c3eb6c0c8bd01912", "fetched_at": "2026-08-28T04:04:42.960105+00:00", "kind": "readme", "missing": false, "url": "https://github.com/boku7/BokuLoader"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:04:42.960105+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:04:42.960105+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:04:42.960105+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T04:37:05.972563+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "7edc76ad1e36ac974dbe00c9be3b594169463715c67a09a8c3eb6c0c8bd01912", "fetched_at": "2026-08-28T04:04:42.960105+00:00", "kind": "readme", "missing": false, "url": "https://github.com/boku7/BokuLoader"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:04:42.960105+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:04:42.960105+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T04:37:05.972563+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "7edc76ad1e36ac974dbe00c9be3b594169463715c67a09a8c3eb6c0c8bd01912", "fetched_at": "2026-08-28T04:04:42.960105+00:00", "kind": "readme", "missing": false, "url": "https://github.com/boku7/BokuLoader"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T04:37:05.972563+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "7edc76ad1e36ac974dbe00c9be3b594169463715c67a09a8c3eb6c0c8bd01912", "fetched_at": "2026-08-28T04:04:42.960105+00:00", "kind": "readme", "missing": false, "url": "https://github.com/boku7/BokuLoader"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T04:37:05.972563+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "7edc76ad1e36ac974dbe00c9be3b594169463715c67a09a8c3eb6c0c8bd01912", "fetched_at": "2026-08-28T04:04:42.960105+00:00", "kind": "readme", "missing": false, "url": "https://github.com/boku7/BokuLoader"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T04:37:05.972563+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "7edc76ad1e36ac974dbe00c9be3b594169463715c67a09a8c3eb6c0c8bd01912", "fetched_at": "2026-08-28T04:04:42.960105+00:00", "kind": "readme", "missing": false, "url": "https://github.com/boku7/BokuLoader"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 0, "longevity": 100, "rhythm": 35}, "computed_at": "2026-09-03T02:20:16.233290+00:00", "flags": ["no_releases"], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 1844, "days_push": 1015, "days_rel": null, "gap_med": null, "n_releases_24m": 0}, "score": 32, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}