文章 Attack Code 的详细全文。安全和开发总是具有伴生属性，尤其是云的安全方向，本篇文章是希望能帮助到读者的云安全入门材料。Full text of the article Attack Code. Security and development always have concomitant attributes, and this is especially true with the security direction of the cloud. This article is an introduction to cloud security that I hope will help readers.

Zero Privilege Kubernetes Penetration Testing problem solver

/root/.ssh/authorized_keys evil file watchdog with ebpf tracepoint hook.

[ALL IN ONE] Everything that I shared to public about Cloud Security is here.

Esonhugh self maintained Claude Code marketplace

a antibot waf bypasser based on pydoll framework good at Cloudflare, 基于 pydoll 编写 cf 或其他家验证 waf 绕过人机检查的 skills. 现已加入 https://github.com/Esonhugh/Marketplace Marketplace 豪华午餐

IngressNightmare POC. world first non-blind remote execution exploitation with multi-advanced exploitation methods. allow on disk exploitation. CVE-2025-24514 - auth-url injection, CVE-2025-1097 - auth-tls-match-cn injection, CVE-2025-1098 – mirror UID injection -- all available.

Python3 Based gopherus, completely refactored and added more feature.

Docker 逃逸 Release Agent 利用始末

Yapi mock script RCE another version. Webshell way. 另一种 Webshell 方式的 Yapi 命令执行的方法 相比于其他的利用方式 更加微操和可控 影响更小

Esonhugh self-maintained-nuclei-templates public version. Use this as ~/nuclei-templates/local/esonhugh-public-nuclei, nuclei will add automatically when scanning and never conflict to other nuclei template.

Open Source XSS exploitation tool. using http proxy to access the browser which executed js. [Engineering Experimental]

Kubernetes has its “ADCS” -- How To Backdoor a Kubernetes in silence and more persistent?

self maintain claude code. A Branch begins https://github.com/Ta0ing/claude-code_evil

Article backup

anonymous to cluster-admin via Heapdump.

Let sliver use msf payload!

Here is useful scripts collections. You can forge tickets locally with secret keys or certificates. It's useful when you want backdoor/persistence with opsec

【Remain Fix】【测试项目 仍需修复】RexJava 是一个用 Go 语言编写的 Java 序列化流解析库，从 Ruby 的 rex-java 库移植而来。该库专门用于安全研究和渗透测试，能够解析和构建 Java 对象序列化格式的二进制流。Generated By Cursor

Claude Code plugin: Analyze Interactive Brokers (IBKR) trading history — P&L, portfolio, fees, patterns, fx. Read-only Flex API access.

a golang based dotnet ysoserial poc generation tool. Operated by cursor and reproduce from metasploit

Flipper zero NFC is mystery. KDF is the simple one in complicated

cilium ebpf common starter template for go.

自动化 macOS 微信 devtools Patcher 工具

Here is a common vulnerability when Kubernetes Controller designed.

Document of Spider in the Pod - How to Penetrate Kubernetes with Low or No Privileges

Wp

Self collected Metasploit module (include self maintaining)

TradingView Claude Code Plugin — read-only market data access with persistent headless Chrome

Play with ChatGPT-Web and found the HTML rendering in description settings. [Add Custom js and html in the XSS payload to enhanced ChatGPT-Web]

AI Enhanced hacking and Osint Article

[DEPRECATED WARNING] Add SecretKey List it and Delete it API SDK

A Golang cli template based on Cobra Viper Survey...

Cobra Viper TableWriter ColorCobra survey all in one template

An Cloud PolicyDocument go parsing library for AWS-like Cloud providers

Cilium/ebpf Learning idea from boratanrikulu/durdur

a linux shellcode dev project. directly compile the c into shellcode and debugging in it

微步威胁情报快速搜索和获取 skills 支持 openclaw shared Browser 持久化或 ducc 两种

Aliyun CTF Teapot mail server POC for DKIM

Based on arm64 linux kernel code using VSCode and qemu debug with gef. Self maintain.Works on KaliLinux in PD(m1 mac).

肯德基疯狂星期四~~利用~~辅助模块

apisix Authed admin dashboard - RCE with web shell sample -

My writeup for hackthebox business CTF 2024 cloud part

Flexible and powerful Go library for transforming data from various formats (CSV, JSON, etc.) into desired Go struct types. (Insecure)

视频教程转 Markdown 文本教程工具。专为 Apple Silicon Mac 优化，利用 mlx-whisper GPU 加速转录 + macOS 原生 Vision OCR 提取屏幕内容，让你的 AI 读懂视频教程

腾讯云 Coding CICD Devops 一体化平台 OpenApi 对接 SDK 以及个人或 OAuth Token 利用演示

flipperzero ufbt vscode project how to with no canvas hack? Howto: raw project github.com:csBlueChip/FlipperZero_plugin_howto.git

CVE-2023-7028 killer

abbr. as sss. This is a Utils designed for Terminal based user for manage, share, logging their Shell Script in one place.

unofficial guide of cilium/ebpf library. 非官方 cilium ebpf 库踩坑指南

Red Team Script for Cloud pentest with private Cloud built with OpenShift. Fast Extrated the config information in bootstrap.ign file

Funny idea for Git dir leak hack tools hack back

Python based auto config tool

Official Nuclei Template and other templates

my description

nuclei modified. Demo of DSL support Store and load function which makes the nuclei DSL extractor can do things with pipeline in one template

Easy Simple Console hook of TamperMonkey

No description.

Go gin quick template project

from user: https://github.com/vxunderground/WinAPI-Tricks.git and https://github.com/vxunderground/VX-API

一个用于在 stdin 流式处理 在大量输入/流式输入的情况下匹配搜索大量指定关键词 的极致优化方案 go binary

微信公众号后端的快速开发框架

Insecure rancher CLI with default v3 api

Devstream Command injection via evil yaml file in plugin gitlab-ce-docker

CTF Challenge I designed

Networker Project: DN42 网络配置生成预览收集 Web 服务

Svelte with Svelte Material UI (SMUI). Easy setup theme. Javascript.

who fuck the fucker? and who watch the watcher

自动获得阳光长跑数据并推到手机

my archive of the program in my robotic club

个人中文简历 Latex 源码 https://hijiangtao.github.io/

x64 Linux (Kernel > 3.19) custom Meterpreter-like shellcode experiment

This is the helm chart of team-base bug bounty framework (project https://github.com/honoki/bbrf-server). You can go with this chart in your team infrastructure.

ebpf based next generation proxy

CRUD代码生成、内置WEB终端，基于Vue3.x(setup)+ThinkPHP6+TypeScript+Vite+Pinia+Element Plus，自适应多端，同时提供Web和Server端、自动注册路由、无限级菜单权限节点、全局数据回收站、字段级修改保护等集颜值、实用、敏捷于一身的后台管理系统。

awesome cloud security || 收集一些国内外不错的云安全资源，该项目主要面向国内的安全人员

wooyun-legacy skill for claude code

A golang ebpf libary based on cilium/ebpf and datadog/ebpf. (research and document proposal)

No description.

aliyun system managed policy crawler

MacOS - Java version switcher based on PATH environment hijack.(self used)

This is profiles of esonhugh personal use.and i share with public

爱飞的鸟的博客的友链申请仓库

MQTT-PWN intends to be a one-stop-shop for IoT Broker penetration-testing and security assessment operations.

rancher chart with external database.

Tool for port forwarding & intranet proxy

🕵️‍♂️ Collect a dossier on a person by username from thousands of sites

Repositório criado com intuito de reunir templates da ferramenta Nuclei dentro do contexto Brasil

Update Hack tricks

[deprecated]

Exploits for CNEXT (CVE-2024-2961), a buffer overflow in the glibc's iconv()

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

A cross-platform ChatGPT/Gemini UI (Web / PWA / Linux / Win / MacOS). 一键拥有你自己的跨平台 ChatGPT/Gemini 应用。

The configuration generator for sing-box

Same as csproj powerlessshell but using sln to redirect to csproj file

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

考点为 CSTI 获取 token (干掉 html 标签 < 头 和 XSS 可能的标签)

No description.

go版本的钉钉开发api

🎉 A Vue.js 3 UI Library made by Element team

HDU Help test homework

AI 驱动的代码安全审计框架。只关注有实际危害的漏洞，支持组合漏洞攻击链分析

pure frontend ipa signing page.

non official claude agent sdk in golang which is same as the python agent sdk

No description.

friends wall with new skeleton

optimized jframe structure

not a reverse-engineered version of the Cobalt Strike Beacon

This is a single cli tool for testing and debugging network port connections. Just like some RJ45 ethernet cable tester but for all types of network ports.

CF-Hero is a reconnaissance tool that uses multiple data sources to discover the origin IP addresses of Cloudflare-protected web applications

No description.

基于真寻bot框架开发的社团管理机器人

pure go - wasm based bindings for the Keystone assembler

Client/server code that impersonates TLS 1.3 to disguise C2 activity.

一个(包含)纯真IP库的单一可执行文件

logrus-easy-formatter is package that allows to easily customize Logrus output format

Go API Client for Metasploit RPC API

Flowbite-Svelte starter

No description.

月海 (Sea Moon) 是一款 FaaS/BaaS 实现的 Serverless 代理/云渗透工具，致力于开启云原生的渗透模式。

Not The Hidden Wiki - The largest repository of links related to cybersecurity

Exploit PoC for CVE-2024-32002

No description.

a distributed python FTP server of https://github.com/Red-Eyed/python_ftp_server/ use with `pipx install git+https://github.com/Esonhugh/pyftp.git` and `ftpserver.py -h`

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

JSON Schemas for every version of every object in every version of Kubernetes

📦 Make security testing of K8s, Docker, and Containerd easier.

Exam note template for OSCP.

A tool which bypasses AMSI (AntiMalware Scan Interface) and PowerShell CLM (Constrained Language Mode) and gives you a FullLanguage PowerShell reverse shell. Feel free to modiy and DM if you find some bugs :)

medium interaction postgresql honeypot

自己学习java安全的一些总结，主要是安全审计相关

TOML for Modern C++

An XDP program to redirect traffic

Metasploit Framework(Modify)

Python create zip file to test zip slip and zip link file LFI

Terraform Visual is an interactive way of visualizing your Terraform plan

T Wiki 云安全知识文库，可能是国内首个云安全知识文库？

A swiss army knife for pentesting networks

pull request yourID

wails framework with tailwindcss sveltekit skeleton typescript supported APP template.

李跳跳APK包备份

Hackthebox Write-up Templates

一个尝试绕过 Cloudflare 来使用 ChatGPT 接口的程序

Enumerate / Dump Docker Registry

Dockerized Codebase for www.awsdocsgpt.com (AI-powered Search and Chat for AWS Documentation)

Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place

Strings Element Randomize go lib

An experimental HTTP server implemented as Linux kernel module

Nuclei documentation - DSL helperfunctions

DSL engine

A simple flooding tool written with Golang

DKIM package for golang

little command line tool to hack the 2fa if you got the secret but Time is not sync on server.

拼多多apk内嵌提权代码，及动态下发dex分析

Instructions and issue tracking for Service Mesh capabilities of Cilium

Community curated list of templates for the nuclei engine to find security vulnerabilities.

HDU 操作系统 OS 实验作业 3 自定义 Shell+管道通信 消息队列 共享内存通信 POSIX

Pure-Go library to read, modify and load eBPF programs and attach them to various hooks in the Linux kernel.

HDU 操作系统 OS 作业 1 2 syscall 与 driver 实现

OrcaC2是一款基于Websocket加密通信的多功能C&C框架，使用Golang实现。(Test)

A much more easy and friendly way to make a GraphQL http service

题目信息

a rep for documenting my study, may be from 0 to 0.1 from y4tacker

😎✌️A flamego template with some useful thing. forked template from wujunyi

ActiveDirectory Proxy- Like attack method

2022年杭州电子科技大学HW社团招新报名网站

Linux Device Drivers Development.

Collection of various malicious functionality to aid in malware development

Coding Thinking

一款信息泄漏利用工具，适用于.git/.svn/.DS_Store泄漏和目录列出

Svelte with skeleton support.

For weaponize

招新网站后端

a lib for hduers

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

Fig adds autocomplete to your terminal.

Friend Link Wall

No description.

A little tool to play with Windows security Research.

信呼，免费开源的办公OA系统，包括APP，pc上客户端，REIM即时通信，服务端等，让每个企业单位都有自己的办公系统。

Zuoye

阿里云ECS、策略组辅助小工具

DevStream: the open-source DevOps toolchain manager (DTM).

No description.

example project for channels and protobuf

https://swagger.eson.quest

Svelte template with windicss

The Last Web Recon Tool You'll Need

DN42 config generate Sever (Frontend)

Svelte Material UI Components

HDU Hackathon五月校赛报名网站

DN42 config generate Sever (Backend)

My New Blog Powered by HEXO http://leiblog.wang

https://api-open-sdk.eson.quest/

要什么女朋友.jpg Eson懒活指定使用前端界面 Aka It Works. v1.0

Golang相关：[审稿进度80%]Go语法、Go并发思想、Go与web开发、Go微服务设施等

No description.

杭电助手后端2021新人考核小任务汇总仓库

No description.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF