Klez Virus
Research Scientist at SpecterOps
Summary
🤩
RockstarKlez Virus is a research scientist and seasoned security engineer with 11 years of experience building offensive tooling and hardening evasion techniques for AV/EDR systems. He is an active open-source maintainer whose projects include SysWhispers3 and a template-driven evasion framework (inceptor), where he improved cross-platform stability, fixed complex build issues, and refined exploit payload generation. His work spans weaponized proof-of-concept exploits (CVE-2021-40444), lateral movement tooling, AMSI/WLDP bypasses, and PHP unserialize gadget development, showing deep practical knowledge of Windows internals and binary/serialization exploitation. A lucky husband and proud father outside of code, he brings a pragmatic, detail-oriented approach to offensive security research and reproducible exploit engineering.
11 years of coding experience
Github Skills (37)
assembly10
python10
rce10
wp-api10
winapi10
c1110
security10
c1710
obfuscation10
system-calls10
smarty10
exploit10
red10
php10
dotnet-core10
Programming languages (10)
Github contributions (5)
klezVirus/SysWhispers3
Mar 2022 - Dec 2022
SysWhispers on Steroids - AV/EDR evasion via direct system calls.
Role in this project:
Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:2 reviews, 16 commits, 4 PRs in 9 months
Contributions summary:Klez primarily contributed to fixing errors and improving the stability of the codebase related to direct system calls and evasion techniques, which is indicated by the repository description. The user addressed VS-specific errors, likely related to build environments, ensuring cross-platform compatibility. They also integrated updates and incorporated compatibility features, thereby improving the project's robustness.
callsedrsteroidsdirectsystem-calls
klezVirus/CheeseTools
Sep 2020 - Aug 2021
Self-developed tools for Lateral Movement/Code Execution
Role in this project:Security Engineer
Security EngineerContributions:17 commits, 14 pushes, 1 branch in 11 months
Contributions summary:Klez primarily focused on developing and refining tools for lateral movement and code execution within a red teaming context. The commits showcase improvements to AMSI and WLDP bypass techniques using PowerShell, along with the addition of functionality to load and execute C# assemblies reflectively. Furthermore, the user added tools for RDP credential theft and refactored SQL injection functionalities.
powershellcode-executionlateral-movementredteamingmssql
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.