├── .gitignore ├── Crassus.sln ├── Crassus ├── App.config ├── Crassus.csproj ├── Crassus │ ├── CommandLine │ │ ├── CommandLineParser.cs │ │ └── RuntimeData.cs │ ├── Detect.cs │ ├── EventProcessor.cs │ ├── Manager.cs │ └── PEFileExports.cs ├── ProcMon │ ├── ProcMonConfig.cs │ ├── ProcMonConstants.cs │ ├── ProcMonPMC.cs │ └── ProcMonPML.cs ├── Program.cs ├── Properties │ ├── AssemblyInfo.cs │ ├── Resources.Designer.cs │ └── Resources.resx └── Utils │ └── Logger.cs ├── LICENSE ├── Privesc.PMF ├── README.md ├── binaries ├── Crassus.exe └── Crassus.pdb └── screenshots ├── Crassus_flowchart.png ├── acronis.png ├── acronis_openssl.png ├── acronis_planted.png ├── bitbucket.png ├── bitbucket_rename_dir.png ├── elasticsearch_planted.png ├── exports-def.png ├── exports-version.png ├── exports.png ├── mcafee.png ├── mcafee_results.png ├── output.png ├── procmon_boot_log.png ├── runtime.png └── sqlserver2022.png /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/vu-ls/Crassus/HEAD/.gitignore -------------------------------------------------------------------------------- /Crassus.sln: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/vu-ls/Crassus/HEAD/Crassus.sln -------------------------------------------------------------------------------- /Crassus/App.config: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/vu-ls/Crassus/HEAD/Crassus/App.config -------------------------------------------------------------------------------- /Crassus/Crassus.csproj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/vu-ls/Crassus/HEAD/Crassus/Crassus.csproj -------------------------------------------------------------------------------- /Crassus/Crassus/CommandLine/CommandLineParser.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/vu-ls/Crassus/HEAD/Crassus/Crassus/CommandLine/CommandLineParser.cs -------------------------------------------------------------------------------- /Crassus/Crassus/CommandLine/RuntimeData.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/vu-ls/Crassus/HEAD/Crassus/Crassus/CommandLine/RuntimeData.cs -------------------------------------------------------------------------------- /Crassus/Crassus/Detect.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/vu-ls/Crassus/HEAD/Crassus/Crassus/Detect.cs -------------------------------------------------------------------------------- /Crassus/Crassus/EventProcessor.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/vu-ls/Crassus/HEAD/Crassus/Crassus/EventProcessor.cs -------------------------------------------------------------------------------- /Crassus/Crassus/Manager.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/vu-ls/Crassus/HEAD/Crassus/Crassus/Manager.cs -------------------------------------------------------------------------------- /Crassus/Crassus/PEFileExports.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/vu-ls/Crassus/HEAD/Crassus/Crassus/PEFileExports.cs -------------------------------------------------------------------------------- /Crassus/ProcMon/ProcMonConfig.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/vu-ls/Crassus/HEAD/Crassus/ProcMon/ProcMonConfig.cs -------------------------------------------------------------------------------- /Crassus/ProcMon/ProcMonConstants.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/vu-ls/Crassus/HEAD/Crassus/ProcMon/ProcMonConstants.cs -------------------------------------------------------------------------------- /Crassus/ProcMon/ProcMonPMC.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/vu-ls/Crassus/HEAD/Crassus/ProcMon/ProcMonPMC.cs -------------------------------------------------------------------------------- /Crassus/ProcMon/ProcMonPML.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/vu-ls/Crassus/HEAD/Crassus/ProcMon/ProcMonPML.cs -------------------------------------------------------------------------------- /Crassus/Program.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/vu-ls/Crassus/HEAD/Crassus/Program.cs -------------------------------------------------------------------------------- /Crassus/Properties/AssemblyInfo.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/vu-ls/Crassus/HEAD/Crassus/Properties/AssemblyInfo.cs -------------------------------------------------------------------------------- /Crassus/Properties/Resources.Designer.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/vu-ls/Crassus/HEAD/Crassus/Properties/Resources.Designer.cs -------------------------------------------------------------------------------- /Crassus/Properties/Resources.resx: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/vu-ls/Crassus/HEAD/Crassus/Properties/Resources.resx -------------------------------------------------------------------------------- /Crassus/Utils/Logger.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/vu-ls/Crassus/HEAD/Crassus/Utils/Logger.cs -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/vu-ls/Crassus/HEAD/LICENSE -------------------------------------------------------------------------------- /Privesc.PMF: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/vu-ls/Crassus/HEAD/Privesc.PMF -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/vu-ls/Crassus/HEAD/README.md -------------------------------------------------------------------------------- /binaries/Crassus.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/vu-ls/Crassus/HEAD/binaries/Crassus.exe -------------------------------------------------------------------------------- /binaries/Crassus.pdb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/vu-ls/Crassus/HEAD/binaries/Crassus.pdb -------------------------------------------------------------------------------- /screenshots/Crassus_flowchart.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/vu-ls/Crassus/HEAD/screenshots/Crassus_flowchart.png -------------------------------------------------------------------------------- /screenshots/acronis.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/vu-ls/Crassus/HEAD/screenshots/acronis.png -------------------------------------------------------------------------------- /screenshots/acronis_openssl.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/vu-ls/Crassus/HEAD/screenshots/acronis_openssl.png -------------------------------------------------------------------------------- /screenshots/acronis_planted.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/vu-ls/Crassus/HEAD/screenshots/acronis_planted.png -------------------------------------------------------------------------------- /screenshots/bitbucket.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/vu-ls/Crassus/HEAD/screenshots/bitbucket.png -------------------------------------------------------------------------------- /screenshots/bitbucket_rename_dir.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/vu-ls/Crassus/HEAD/screenshots/bitbucket_rename_dir.png -------------------------------------------------------------------------------- /screenshots/elasticsearch_planted.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/vu-ls/Crassus/HEAD/screenshots/elasticsearch_planted.png -------------------------------------------------------------------------------- /screenshots/exports-def.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/vu-ls/Crassus/HEAD/screenshots/exports-def.png -------------------------------------------------------------------------------- /screenshots/exports-version.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/vu-ls/Crassus/HEAD/screenshots/exports-version.png -------------------------------------------------------------------------------- /screenshots/exports.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/vu-ls/Crassus/HEAD/screenshots/exports.png -------------------------------------------------------------------------------- /screenshots/mcafee.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/vu-ls/Crassus/HEAD/screenshots/mcafee.png -------------------------------------------------------------------------------- /screenshots/mcafee_results.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/vu-ls/Crassus/HEAD/screenshots/mcafee_results.png -------------------------------------------------------------------------------- /screenshots/output.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/vu-ls/Crassus/HEAD/screenshots/output.png -------------------------------------------------------------------------------- /screenshots/procmon_boot_log.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/vu-ls/Crassus/HEAD/screenshots/procmon_boot_log.png -------------------------------------------------------------------------------- /screenshots/runtime.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/vu-ls/Crassus/HEAD/screenshots/runtime.png -------------------------------------------------------------------------------- /screenshots/sqlserver2022.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/vu-ls/Crassus/HEAD/screenshots/sqlserver2022.png --------------------------------------------------------------------------------