Introducing Goffloader: A Pure Go Implementation of an In-Memory COFFLoader and PE Loader

Praetorian has launched Goffloader, a pure Go tool for in-memory COFFLoader and PE loader that allows Cobalt Strike BOFs and unmanaged PE files to execute without requiring file writing to disk. It aims to simplify processes traditionally centred around C and C++ languages, avoiding CGO complications, expanding Go’s security capabilities, and enhancing the Chariot Breach & Attack Simulation. Currently, it caters to the x64 architecture with plans to support 32-bit versions.