Esonhugh Skyworship's repositories
yapi-rce-webshell
Yapi mock script RCE another version. Webshell way. 另一种 Webshell 方式的 Yapi 命令执行的方法 相比于其他的利用方式 更加微操和可控 影响更小
WeaponizedVSCode
A VSCode Workspace based hacking environment utils. Starting your Note-Driven Hacking experience. Checkout the following link to sample of HackThebox mist.htb
KubernetesCS
Kubernetes has its “ADCS” -- How To Backdoor a Kubernetes in silence and more persistent?
ProxyInBrowser
Open Source XSS exploitation tool. using http proxy to access the browser which executed js. [Engineering Experimental]
My-Cloud-Security
[ALL IN ONE] Everything that I shared to public about Cloud Security is here.
flipper_kdf
Flipper zero NFC is mystery. KDF is the simple one in complicated
Spider-in-the-Pod-How-to-Penetrate-Kubernetes-with-Low-or-No-Privileges
Document of Spider in the Pod - How to Penetrate Kubernetes with Low or No Privileges
CloudPolicy
An Cloud PolicyDocument go parsing library for AWS-like Cloud providers
nginxnightmare
IngressNightmare-POC CVE-2025-1974 https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities#how-did-we-discover-ingressnightmare-24
WeaponziedVSCode-Example-MIST.HTB
Weaponized VSCode Template Example (Release On Machine Expired)
gin_template
Go gin quick template project
HTB-BusinessCTF-2024-Cloud
My writeup for hackthebox business CTF 2024 cloud part
ShellScriptSnippet
abbr. as sss. This is a Utils designed for Terminal based user for manage, share, logging their Shell Script in one place.
ConsoleHook
Easy Simple Console hook of TamperMonkey
customMeterpreterTCPListener
x64 Linux (Kernel > 3.19) custom Meterpreter-like shellcode experiment
insecure-rancher-cli
Insecure rancher CLI with default v3 api
cnext-exploits
Exploits for CNEXT (CVE-2024-2961), a buffer overflow in the glibc's iconv()
flowbite-svelte-starter
Flowbite-Svelte starter
git_rce
Exploit PoC for CVE-2024-32002
go-msf-rpc
Go API Client for Metasploit RPC API
ipqqwry
一个(包含)纯真IP库的单一可执行文件
NTHW
Not The Hidden Wiki - The largest repository of links related to cybersecurity