Hi there 👋

- Intro

this is Esonhugh Skyworship's Github

📫 How to reach me: github@eson.ninja or Telegram

🌱 I’m currently learning Security.

Thank u for your watching and star.

- Sponsor

Patreon - paid documents articles.

..To Be continue.

- Badge:

|||| |---|---|---| ||||

- Vulnerabilities (CVE/SRC):

• Tencent Src - 腾讯 Src 个人主页
• CVE-2022-27103 - Element-plus show-overflow-tooltip XSS

- Articles You never want miss:

• Attack Code
• Devstream ConfigFile Command Injection Sink
• AI Enhanced Pentesting
• my cloud security articles
• How AI kills the vshell

- I'm also write some codes ;)

- Tools

• Shell Script manager - ShellScriptSnippet aka SSS
• Weaponized VSCode Project workspace with python msf and other hack tools
• Ticket Master/Token Master for forged Token/Ticket/Cookie in Cloud/VirtualMachine Platforms
• Kubernetes low priv enumeration tool (no need service account)
• Gopherus3 Python3 gopherus
• ProxyInBrowser - XSS exploitation with Websocket, which create http proxy to relay request via victim browser
• ConsoleHook - a tool for you to analyze obfed javascript frontends
• Sliver TCP Stager helper - for Windows staged payload and linux staged pauload generator and hoster

- "API" SDK (unstable) And Skeleton Project

• (template) Wails + Skeleton sveltekit ui
• (template) Go Cilium ebpf prog starter
• (template) Go cobra cli tools template
• [Out of Date] Openai platform API for API Key management
• Tencent Coding API

- POC Based

• [SelfUse] Metasploit modules

• [SelfUse] Nuclei templates

• ebpf sshd hook backdoor

• Bad Zip file creator of testing Zip slip and Zip file read

• Evil Sln project with MsBuild Old Trick

• Aliyun CTF Email Spoofing POC

• XSS in ChatGPT Web Settings

• GitHack-like tools hack back via git LFI

• APISIX Gateway Webshell

• Yapi Webshell

• Ingress Nightmare - kubernetes ingress controller remote rce exploitation

- Flipperzero developping

• KDF sample
• UFBT Application Guide

- Helm Charts

• BBRF framework in Kubernetes

- Metrics