CROSSMOS is an advanced offensive framework for adversary simulation (Red Team) that relies on a multi-stage attack chain, starting from a USB HID device (DigiSpark) and ending with the deployment of a persistent Command & Control (C2) agent running with SYSTEM privileges on Windows. The project focuses on abusing user trust, default operating system behaviors, and native system tools (Living-off-the-Land) without exploiting software vulnerabilities. It consists of an initial access phase via keyboard command injection, followed by a PowerShell-based loader stage that establishes persistence using scheduled tasks, and finally the execution of the CROSSMOS.py agent as a Telegram-based RAT, leveraging an encrypted and firewall-friendly C2 channel. The project is intended strictly for educational, research, and Red Team testing purposes within authorized lab environments, and it also provides significant value for defensive teams seeking to understand and detect this class of behavioral threats.

Back $_ warehouse $_