Skip to content
View y0uall's full-sized avatar

Block or report y0uall

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don't include any personal information such as legal names or email addresses. Markdown supported. This note will be visible to only you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
y0uall/README.md

Hi, I'm Michael πŸ‘‹

Just someone who enjoys breaking things, building tools, and writing Rust.

Cybersecurity is my hobby β€” I spend my free time on CTF challenges (mostly HackTheBox), diving into Linux internals, and building offensive tools to better understand how things actually work under the hood.


πŸ¦€ clawsh β€” C2 Framework

A modern command & control framework written entirely in Rust. Started as a learning project, grew into something real.

Repository Description
clawsh Handler β€” multi-session, async PTY shells, TLS, HTTP tunneling, port forwarding. Single binary, zero deps. πŸ”’
clawsh-imp Native Linux & Windows implant β€” raw syscalls, EDR/eBPF evasion, in-memory execution, minimal footprint. πŸ”’
clawsh-proto Protocol & crypto layer β€” X25519 ECDH, HKDF-SHA256, ChaCha20-Poly1305. 🌐

πŸ”’ = private Β· 🌐 = open source


πŸ›‘οΈ sentinel β€” C2 Traffic Detection

The defensive counterpart β€” a network detection engine that catches the traffic clawsh (and other C2 frameworks) generate.

Repository Description
sentinel 7-crate Rust workspace β€” beacon analysis, JA4 fingerprinting, DNS anomaly detection, Sigma rules. πŸ”’

πŸ›  What I work with

Rust Linux Bash Python HackTheBox

Regards, uall

Pinned Loading

  1. clawsh-proto clawsh-proto Public

    Shared wire protocol and cryptography library for the clawsh C2 framework

    Rust