Archives
Project Nightcrawler
Overview
Project Nightcrawler (git.projectnightcrawler.dev) is a self-hosted Gitea instance used to publish and mirror security research repositories when mainstream forges remove PoC code.
The NightmareEclipse org hosts the MSNightmare / Nightmare-Eclipse Windows exploit cluster — BlueHammer, RedSun, UnDefend, YellowKey, GreenPlasma, MiniPlasma, RoguePlanet, GreatXML (BitLocker/WinRE), and LegacyHive (ProfSvc arbitrary hive load, July 2026). Many repos mirror earlier Church of Malware git uploads. Separate contributors also publish kernel research (e.g. invalid/ByePg pure-Rust PatchGuard observation driver, July 2026).
OFFSITE.DARK cites Project Nightcrawler as the PoC-origin source for Signals entries in this cluster — same attribution pattern as Sploitus index references or Cyderes Howler Cell analysis.
Treat domains, RSS feeds, and researcher blogs (blog.projectnightcrawler.dev, deadeclipse666.blogspot.com) as PoC-distribution infrastructure for watchlisting — not as endorsement of use outside authorized research.
Primary use cases
- Indexing primary PoC sources after GitHub/GitLab account terminations
- Tracking Nightmare-Eclipse cluster releases and mirror freshness
- Cross-referencing README author notes with vendor CVE assignments
- Defensive research on published attack chains and detection gaps
Detection / defense notes
- Block or monitor egress to git.projectnightcrawler.dev on production endpoints where policy requires
- Behavioral detection over PoC hashes — cluster tools share junction/oplock/Defender-abuse primitives
- Assume ITW use: Huntress documented BlueHammer, RedSun, and UnDefend in live intrusions
Related tools
- Sploitus — Exploit and tool search engine. Aggregates Exploit-DB, GitHub PoCs, and Metasploit modules into one query interface.
- Church of Malware — Curated malware corpus and reference library. Indexed samples, writeups, and scripture-style documentation for researchers tracing lineage and behavior.
- Ghidra — Reverse engineering IDE. Disassembly, decompilation, scripting, and binary diffing.