netero1010/ClipboardHistoryThief

Stars
36
Rank 712,094 (Top 15 %)
Language
C
License
MIT License
Created about 1 year ago
Updated about 1 year ago

netero1010/ClipboardHistoryThief

netero1010

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

POC tool to extract all persistent clipboard history data from clipboard service process memory

EDRSilencer

A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server.

GhostTask

A tool employs direct registry manipulation to create scheduled tasks without triggering the usual event logs.

ScheduleRunner

A C# tool with more flexibility to customize scheduled task for both persistence and lateral movement in red team operation

ServiceMove-BOF

New lateral movement technique by abusing Windows Perception Simulation Service to achieve DLL hijacking code execution.

RDPHijack-BOF

Cobalt Strike Beacon Object File (BOF) that uses WinStationConnect API to perform local/remote RDP session hijacking.

TrustedPath-UACBypass-BOF

Cobalt Strike beacon object file implementation for trusted path UAC bypass. The target executable will be called without involving "cmd.exe" by using DCOM object.

Quser-BOF

Cobalt Strike BOF for quser.exe implementation using Windows API

Vulnerability-Disclosure