Cr4sh

😈 zero-fucks-given infosec research | info: 🔗 keybase.io/d_olex | 🇺🇦 Ukraine needs your help to kill Ruϟϟian zombies: 🔗 savelife.in.ua/en/donate 💪

Pinned Repositories

Aptiocalypsis
Arbitrary SMM code execution exploit for industry-wide 0day vulnerability in AMI Aptio based firmwares
Language:Python64 10 016
KernelForge
A library to develop kernel level Windows payloads for post HVCI era
Language:C++380 12 073
MicroBackdoor
Small and convenient C2 tool for Windows targets. [ Русский -- значит нахуй! ]
Language:C++594 18 0139
openreil
Open source library that implements translator and tools for REIL (Reverse Engineering Intermediate Language)
Language:C497 66 076
pico_dma
Autonomous pre-boot DMA attack hardware implant for M.2 slot based on PicoEVB development board
Language:C69 4 012
s6_pcie_microblaze
PCI Express DIY hacking toolkit for Xilinx SP605. This repository is also home of Hyper-V Backdoor and Boot Backdoor, check readme for links and info
Language:C757 49 0157
SmmBackdoor
First open source and publicly available System Management Mode backdoor for UEFI based platforms. Good as general purpose playground for various SMM experiments.
Language:C589 47 0163
SmmBackdoorNg
Updated version of System Management Mode backdoor for UEFI based platforms: old dog, new tricks
Language:C294 10 050
ThinkPwn
Started as arbitrary System Management Mode code execution exploit for Lenovo ThinkPad model line, ended as exploit for industry-wide 0day vulnerability in machines of many vendors
Language:C671 51 084
WindowsRegistryRootkit
Kernel rootkit, that lives inside the Windows registry values data
Language:C489 44 0145

Cr4sh's Repositories

Cr4sh/s6_pcie_microblaze
PCI Express DIY hacking toolkit for Xilinx SP605. This repository is also home of Hyper-V Backdoor and Boot Backdoor, check readme for links and info
Language:C757 49 0157
Cr4sh/ThinkPwn
Started as arbitrary System Management Mode code execution exploit for Lenovo ThinkPad model line, ended as exploit for industry-wide 0day vulnerability in machines of many vendors
Language:C671 51 084
Cr4sh/MicroBackdoor
Small and convenient C2 tool for Windows targets. [ Русский -- значит нахуй! ]
Language:C++594 18 0139
Cr4sh/SmmBackdoor
First open source and publicly available System Management Mode backdoor for UEFI based platforms. Good as general purpose playground for various SMM experiments.
Language:C589 47 0163
Cr4sh/openreil
Open source library that implements translator and tools for REIL (Reverse Engineering Intermediate Language)
Language:C497 66 076
Cr4sh/WindowsRegistryRootkit
Kernel rootkit, that lives inside the Windows registry values data
Language:C489 44 0145
Cr4sh/KernelForge
A library to develop kernel level Windows payloads for post HVCI era
Language:C++380 12 073
Cr4sh/SmmBackdoorNg
Updated version of System Management Mode backdoor for UEFI based platforms: old dog, new tricks
Language:C294 10 050
Cr4sh/fwexpl
PC firmware exploitation tool and library
Language:C++248 26 060
Cr4sh/PeiBackdoor
PEI stage backdoor for UEFI compatible firmware
Language:C210 14 055
Cr4sh/ioctlfuzzer
Automatically exported from code.google.com/p/ioctlfuzzer
Language:C157 14 054
Cr4sh/UEFI_boot_script_expl
CHIPSEC module that exploits UEFI boot script table vulnerability
Language:Python132 22 045
Cr4sh/smram_parse
System Management RAM analysis tool
Language:Python73 7 016
Cr4sh/pico_dma
Autonomous pre-boot DMA attack hardware implant for M.2 slot based on PicoEVB development board
Language:C69 4 012
Cr4sh/Aptiocalypsis
Arbitrary SMM code execution exploit for industry-wide 0day vulnerability in AMI Aptio based firmwares
Language:Python64 10 016
Cr4sh/zc_pcie_dma
DMA attacks over PCI Express based on Xilinx Zynq-7000 series SoC
Language:Tcl60 5 016
Cr4sh/qc_debug_monitor
Debug messages monitor for Qualcomm cellular modems
Language:Python57 10 018
Cr4sh/secretnet_expl
LPE exploits for Secret Net and Secret Net Studio
Language:C++51 8 018
Cr4sh/DbgCb
Engine for communication with remote kernel debugger (KD, WinDbg) from drivers and applications
Language:C++36 7 016
Cr4sh/prl_guest_to_host
Guest to host VM escape exploit for Parallels Desktop
Language:C++28 7 012
Cr4sh/IDA-UbiGraph
IDA Pro plug-in and tools for displaying 3D graphs of procedures using UbiGraph
Language:C++25 7 012
Cr4sh/efiXplorer
IDA plugin for UEFI firmware analysis and reverse engineering automation
Language:C++10 3 06
Cr4sh/r0ak
r0ak ("roak") is the Ring 0 Army Knife -- A Command Line Utility To Read/Write/Execute Ring Zero on for Windows 10 Systems
Language:C10 3 09
Cr4sh/blog
Stuff for blog.cr4.sh website
5 5 03
Cr4sh/capstone
Capstone disassembly/disassembler framework: Core (Arm, Arm64, Mips, PPC, Sparc, SystemZ, X86, X86_64, XCore) + bindings (Python, Java, Ocaml)
Language:C++5 3 03
Cr4sh/masscan
TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.
Language:C4 2 02
Cr4sh/PowerShell-Suite
My musings with PowerShell
Language:PowerShell3 2 01
Cr4sh/chipsec
Platform Security Assessment Framework
Language:C2 2 01
Cr4sh/portage
Portage Package Manager - this is just a mirror, see https://wiki.gentoo.org/wiki/Project:Portage#Contributing_to_Portage
Language:Python2 3 01
Cr4sh/vmlinux-to-elf
A tool to recover a fully analyzable .ELF from a raw kernel, through extracting the kernel symbol table (kallsyms)
Language:Python1 1 01