Esonhugh

Attack_Code

文章 Attack Code 的详细全文。安全和开发总是具有伴生属性，尤其是云的安全方向，本篇文章是希望能帮助到读者的云安全入门材料。Full text of the article Attack Code. Security and development always have concomitant attributes, and this is especially true with the security direction of the cloud. This article is an introduction to cloud security that I hope will help readers.

k8spider

Powerful+Fast+Low Privilege Kubernetes service discovery tools via kubernetes DNS service. Currently supported service ip-port BruteForcing / AXFR Domain Transfer Dump / Coredns WildCard Dump / Pod Verified IP discovery

public-nuclei-template

Esonhugh self-maintained-nuclei-templates public version. Use this as ~/nuclei-templates/local/esonhugh-public-nuclei, nuclei will add automatically when scanning and never conflict to other nuclei template.

WeaponizedVSCode

A VSCode Workspace based hacking environment utils. Starting your Note-Driven Hacking experience. Checkout the following link to sample of HackThebox mist.htb

Gopherus3

Merge that PR 18 about Python3 update.

CloudPolicy

An Cloud PolicyDocument go parsing library for AWS-like Cloud providers

flipper_kdf

Flipper zero NFC is mystery. KDF is the simple one in complicated

my_durdur

Cilium/ebpf Learning idea from boratanrikulu/durdur

TicketMaster

Here is useful scripts collections. You can forge tickets locally with secret keys or certificates. It's useful when you want backdoor/persistence with opsec

gitlab_honeypot

CVE-2023-7028 killer

Esonhugh

my description

insecure-rancher-cli

Insecure rancher CLI with default v3 api

ReverseShellPayloads

aliyun-system-managed

aliyun system managed policy crawler

ChatGPT-Next-Web

A cross-platform ChatGPT/Gemini UI (Web / PWA / Linux / Win / MacOS). 一键拥有你自己的跨平台 ChatGPT/Gemini 应用。

cnext-exploits

Exploits for CNEXT (CVE-2024-2961), a buffer overflow in the glibc's iconv()

go-cli-template-v2

A Golang cli template based on Cobra Viper Survey...

WeaponziedVSCode-Example-MIST.HTB

Weaponized VSCode Template Example (Release On Machine Expired)

Beacon_Source

not a reverse-engineered version of the Cobalt Strike Beacon

friends

friends wall with new skeleton

FullBypass

A tool which bypasses AMSI (AntiMalware Scan Interface) and PowerShell CLM (Constrained Language Mode) and gives you a FullLanguage PowerShell reverse shell. Feel free to modiy and DM if you find some bugs :)

git_rce

Exploit PoC for CVE-2024-32002

kubernetes-json-schema

JSON Schemas for every version of every object in every version of Kubernetes

linpeas-cloud

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

microservices-global

NTHW

Not The Hidden Wiki - The largest repository of links related to cybersecurity

Office-2013-Excel-XLL-Libs

OSCP-Note-Template

Exam note template for OSCP.

pyftp

a distributed python FTP server of https://github.com/Red-Eyed/python_ftp_server/ use with `pipx install git+https://github.com/Esonhugh/pyftp.git` and `ftpserver.py -h`

SeaMoon

月海 (Sea Moon) 是一款 FaaS/BaaS 实现的 Serverless 代理/云渗透工具，致力于开启云原生的渗透模式。