Chris Au (@netero1010)
github

netero1010

Twitter logo Share LinkedIn logo Share Facebook logo Share
  • Stars
    star
    2,631
  • Global Rank 11,425 (Top 0.4 %)
  • Followers 356
  • Following 17
  • Registered over 3 years ago
  • Most used languages
    C
         87.5 %
    C#
         12.5 %
  • Location πŸ‡­πŸ‡° Hong Kong
  • Country Total Rank 82
  • Country Ranking
    C
         2
    C#
         9

Top repositories

1

EDRSilencer

A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server.
C
1,049
star
2

GhostTask

A tool employs direct registry manipulation to create scheduled tasks without triggering the usual event logs.
C
455
star
3

ScheduleRunner

A C# tool with more flexibility to customize scheduled task for both persistence and lateral movement in red team operation
C#
317
star
4

RDPHijack-BOF

Cobalt Strike Beacon Object File (BOF) that uses WinStationConnect API to perform local/remote RDP session hijacking.
C
290
star
5

ServiceMove-BOF

New lateral movement technique by abusing Windows Perception Simulation Service to achieve DLL hijacking code execution.
C
278
star
6

TrustedPath-UACBypass-BOF

Cobalt Strike beacon object file implementation for trusted path UAC bypass. The target executable will be called without involving "cmd.exe" by using DCOM object.
C
115
star
7

Quser-BOF

Cobalt Strike BOF for quser.exe implementation using Windows API
C
82
star
8

ClipboardHistoryThief

POC tool to extract all persistent clipboard history data from clipboard service process memory
C
35
star
9

Vulnerability-Disclosure

2
star