Discover @netero1010 Open Source projects

Chris Au (@netero1010)

netero1010

Stars
2,334
Global Rank 12,536 (Top 0.5 %)
Followers 307
Following 16
Registered about 3 years ago
Most used languages

C
87.5 %

C#
12.5 %
Location 🇭🇰 Hong Kong
Country Total Rank 82
Country Ranking

C
2

C#
7

EDRSilencer

A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server.

GhostTask

A tool employs direct registry manipulation to create scheduled tasks without triggering the usual event logs.

ScheduleRunner

A C# tool with more flexibility to customize scheduled task for both persistence and lateral movement in red team operation

ServiceMove-BOF

New lateral movement technique by abusing Windows Perception Simulation Service to achieve DLL hijacking code execution.

RDPHijack-BOF

Cobalt Strike Beacon Object File (BOF) that uses WinStationConnect API to perform local/remote RDP session hijacking.

TrustedPath-UACBypass-BOF

Cobalt Strike beacon object file implementation for trusted path UAC bypass. The target executable will be called without involving "cmd.exe" by using DCOM object.

Quser-BOF

Cobalt Strike BOF for quser.exe implementation using Windows API

ClipboardHistoryThief

POC tool to extract all persistent clipboard history data from clipboard service process memory

Vulnerability-Disclosure