Windows BYOVD research on DCRCVDrv.sys and Alinubx.sys, reverse engineering their kernel primitives, IOCTL surfaces, and detection opportunities.
☆38Oct 27, 2026Updated last week
Alternatives and similar repositories for 0xCr0ssCrush
Users that are interested in 0xCr0ssCrush are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Kernel-mode process terminator using a signed BYOVD driver. Works on all Windows 10/11. No offsets, no PDB. Rust.☆112Oct 27, 2026Updated last week
- Rust based C2 Framework☆35Sep 29, 2026Updated last month
- Deterministic PyGhidra extraction, triage, and local LLM compiler-backend pipeline for C reimplementation.☆11Oct 18, 2026Updated 3 weeks ago
- Clean Indirect Syscalls with Syscall Tampering.☆52Oct 25, 2026Updated 2 weeks ago
- A DEX-to-JVM bytecode converter built to run the output: passes HotSpot's strict verifier, handles 64 KB+ methods and R8-minified apps, ~…☆17Updated this week
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- ☆25Oct 27, 2026Updated last week
- Reverse engineering analysis of PureRAT, a multi-stage RAT that executes via msbuild.exe and communicates with C2 servers at pure8s.ddnsf…☆19Sep 21, 2026Updated last month
- AntiVE-BehaviorWatch is an advanced behavioral analysis malware that detects automated analysis systems through real-time mouse movement …☆41Jul 12, 2026Updated 3 months ago
- Comment2Shell is a zero click pre auth RCE exploit for WordPress CVE-2026-93485. An anonymous comment plants stored XSS that fires when a…☆65Oct 6, 2026Updated last month
- Advanced EDR Evasion via AI Telemetry Spoofing & WASM Sandboxing. Project Onyx is a PoC Red Team pipeline designed to demonstrate advance…☆119Sep 17, 2026Updated last month
- Advanced PoC & Research for CVE-2026-0828 (Safetica) and CVE-2025-7771 (ThrottleStop). Analysis of BYOVD (Bring Your Own Vulnerable Drive…☆60Oct 3, 2026Updated last month
- A Windows x64 offensive research framework that constructs fully synthetic call stacks☆75Jul 14, 2026Updated 3 months ago
- Credential and sensitive-data exposure triage for file shares☆17Aug 8, 2026Updated 3 months ago
- ☆72Jul 12, 2026Updated 3 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Cross-platform syscall-powered implant & C2 — direct syscalls (Win), raw syscalls (Linux), HTTPS/DNS/ICMP channels. No winapi layer.☆69Oct 25, 2026Updated last week
- ☆53Oct 4, 2026Updated last month
- Windows AppResolver LPE PoC with a filtered-admin-to-SYSTEM demonstration☆15Jul 17, 2026Updated 3 months ago
- Go-based MITM HTTP/HTTPS proxy with HTTP/2 and HTTP/1.1 interception, local CA/per-host cert generation, CONNECT/WebSocket tunneling, di…☆17Jun 10, 2026Updated 4 months ago
- Ring -4 to Ring 0: offense-defense firmware research platform. We build the bootkits, then we catch them. Closed-loop. Zero trust in sili…☆15Oct 14, 2026Updated 3 weeks ago
- Local privilege-escalation proof of concept for the Windows WalletService vulnerability fixed in July 2026.☆61Jul 20, 2026Updated 3 months ago
- PoC for WinNotify, demonstrated through a driver mapper, and local privilege escalation.☆43Sep 20, 2026Updated last month
- No-open firmware exploit for the Wyze WLPA19CV2 color bulb☆14Sep 2, 2026Updated 2 months ago
- Modular post-exploitation framework for authorised red-team work. Interactive reverse/bind shells over TCP/TLS/mTLS, plus a pull-based Go…☆39Oct 7, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Hidden Desktop Plugin For Havoc C2,Soon coming for Sliver.☆265Sep 29, 2026Updated last month
- CSharp4Pentesters☆11Mar 5, 2022Updated 4 years ago
- A foundational C library for building operationally credible offensive capabilities☆95Sep 21, 2026Updated last month
- A Position Independent Code (PIC) implementation of the execute-assembly command built with Crystal Palace.☆22Oct 4, 2026Updated last month
- A zero-symbol static analysis engine that extracts and mathematically ranks the Windows RPC attack surface using an AHP-based risk model.☆16Aug 26, 2026Updated 2 months ago
- Serverless C2 transport plugin for AdaptixC2 v1.2 using AWS Lambda + DynamoDB as the relay infrastructure.☆33Oct 29, 2026Updated last week
- Windows network scanner that finds AI/ML services and MCP servers on your network (shadow AI discovery). Signed, self-updating detection …☆40Updated this week
- Detection-aware BloodHound attack-path scoring - the quietest route to your objective, calibrated across five detection tiers (audit/EDR/…☆67Aug 22, 2026Updated 2 months ago
- How to Register your own AV with Defender☆38Aug 27, 2026Updated 2 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- P³-Shellcode Loader is a loader that implements a code injection technique which leverages the Process Parameters structure as an executi…☆247Jul 8, 2026Updated 3 months ago
- Generate Caddy redirector configs from Cobalt Strike or Sliver C2 profiles.☆25Jul 11, 2026Updated 3 months ago
- DynLoader A modular Windows loader focused on EDR evasion Built with indirect syscall (Tartarus Gate / Hell’s Gate), Manual PE parsing …☆82Jul 10, 2026Updated 3 months ago
- Exploit for ToolShell☆15Nov 20, 2025Updated 11 months ago
- open-source pentest management built to be operated by an AI agent☆29Sep 1, 2026Updated 2 months ago
- SoK/Whitepaper on Offensive Operations against Active Directory Certificate Service☆31Aug 29, 2026Updated 2 months ago
- asmsense: a small model that names and describes functions in stripped x86-64 binaries. Open dataset, baselines, and LoRA experiments.☆19Updated this week