LibTP_Gadget

LibTPGadget Esta es una generalización de https://github.com/AlmondOffSec/LibTPLoadLib para hacer proxy de APIs con un número arbitrario 11 como máximo, pero suficiente de argumentos. Se proporciona como una librería compartida de Crystal Palace. API compatible con el LibTP de @rasta-mouse para...

eden

Eden Eden loader es un PoC UDRL para Cobalt Strike construido con Crystal Palace que combina la técnica de page streaming de Raphael Mudge con una puerta de llamada modular actualmente una versión PIC del BOF de llamada Draugr de Sleepmask-VS. El objetivo de Eden loader es: Demostrar el poder de...

LibTP

LibTP Una biblioteca compartida de Crystal Palace para realizar proxy de llamadas a la API de Nt a través del Threadpool. Créditos Raphael Mudge, Adversary Fan Fiction Writers Guild Chetan Nayak, Dark Vortex...

execute-assembly-pico

Ejecutar ensamblado PICO Un PICO para Crystal Palace que implementa hosting CLR nativo para ejecutar un ensamblado .NET adjunto en memoria, usando la misma técnica que el generador de shellcode donut. Esto te permite cargar herramientas .NET como Rubeus o Seatbelt desde código independiente de...

Maverick

Maverick 一款基于 Adaptix C2 的代理，使用 Crystal Palace — 一个自定义的 PIC（位置无关代码）链接器和 PICO 模块系统构建。演示了如何构建模块化的 Shellcode 代理，其中每个组件（传输、任务、混淆）都是一个独立的 PICO 数据块，在运行时加载。 注意 本代理不包含任何规避技术，不推荐直接用于实战。它只是一个参考实现，用于演示如何使用 Crystal Palace 和 PICO 模块系统构建代理。 Crystal Palace 和 PICO 系统 Crystal Palace 是一个 PIC 链接器，它获取编译后的 COFF...

async-pico-hub

Async PICO HUB Async PICOs es un framework para ejecutar archivos Beacon Object File de larga duración y controlados por eventos dentro de un proceso de Beacon de Cobalt Strike. Proporciona ejecución asíncrona, seguimiento de tareas, apagado ordenado y salida asíncrona segura combinando los PICOs...

Remote-BOF-Runner

远程BOF运行器 一个Havoc扩展框架，用于通过使用Crystal Palace制作的PIC加载器远程执行Beacon对象文件（BOF）。 概述 远程BOF运行器通过利用Crystal Palace PIC加载器，能够在任意进程中安全执行BOF。该框架通过命名管道实现复杂的进程间通信（IPC）机制，将注入进程中的Beacon输出透明地转发回命令与控制（C2）服务器。 设置与安装 扩展安装 确保扩展安装在Havoc扩展目录中： root@kitploit: 你的HAVOC文件夹 + /data/extensions/ 依赖项 要编译PIC加载器，系统上必须安装以下工具和库：...

Crystal-Loaders

Crystal Loaders Este repositorio contiene un par de cargadores PIC y un sleepmask COFF personalizado para usar con Cobalt Strike. Son implementaciones básicas en las que se debe integrar el tradecraft de evasión personalizado mediante Crystal Palace. Uso 1. Descargue la Release de Crystal Palace...

SliverMirage

SliverMirage Un fork de CrystalSliver, que extiende el cargador PICO de Crystal Palace con bypass de AMSI de doble capa, silenciamiento de ETW y seis variantes de entrega para Sliver C2. Qué hace SliverMirage envuelve un DLL de implante de Sliver mediante la virtualización PICO de Crystal Palace,...

CVE-2026-8255

A weakness has been identified in Devs Palace ERP Online up to 4.0.0. This affects an unknown part of the file /inventory/addnewcustomer. This manipulation causes cross site scripting. The attack can be initiated remotely. The exploit has been made available to the public and could be used for...

CVE-2026-8253

A vulnerability was identified in Devs Palace ERP Online up to 4.0.0. Affected by this vulnerability is an unknown functionality of the file /inventory/purchasesave. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit is publicly available a...

CVE-2026-8254

A security flaw has been discovered in Devs Palace ERP Online up to 4.0.0. Affected by this issue is some unknown functionality of the file /inventory/salessave. The manipulation results in cross site scripting. It is possible to launch the attack remotely. The exploit has been released to the...

CVE-2026-8221

A flaw has been found in Devs Palace ERP Online up to 4.0.0. This impacts an unknown function of the file /inventory/item-save. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been published and may be used. The vendor was contacte...

CVE-2026-8220

A vulnerability was detected in Devs Palace ERP Online up to 4.0.0. This affects an unknown function of the file /inventory/customer-save. The manipulation results in cross site scripting. The attack can be executed remotely. The exploit is now public and may be used. The vendor was contacted ear...

CVE-2026-8219

A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0. The impacted element is an unknown function of the file /inventory/supplier-save. The manipulation leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed publicl...

EUVD-2026-29018

A vulnerability was identified in Devs Palace ERP Online up to 4.0.0. This impacts an unknown function of the file /accounts/chart-save. Such manipulation leads to cross site scripting. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was...

EUVD-2026-29011

A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0. This vulnerability affects unknown code of the file /accounts/mr-save. Such manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. T...

CVE-2026-8262

A vulnerability was identified in Devs Palace ERP Online up to 4.0.0. This impacts an unknown function of the file /accounts/chart-save. Such manipulation leads to cross site scripting. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was...

CVE-2026-8256

A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0. This vulnerability affects unknown code of the file /accounts/mr-save. Such manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. T...

CVE-2026-8262 Devs Palace ERP Online chart-save cross site scripting

A vulnerability was identified in Devs Palace ERP Online up to 4.0.0. This impacts an unknown function of the file /accounts/chart-save. Such manipulation leads to cross site scripting. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was...