Discover hktalent/shallot_eschalot Open Source project

spring-cloud / spring-cloud-function,spring.cloud.function.routing-expression,RCE,0day,0-day,POC,EXP,CVE-2022-22963

480

spring-spel-0day-poc

349

CVE-2020-2551

how detect CVE-2020-2551 poc exploit python Weblogic RCE with IIOP

CVE-2020-2546，CVE-2020-2915 CVE-2020-2801 CVE-2020-2798 CVE-2020-2883 CVE-2020-2884 CVE-2020-2950 WebLogic T3 payload exploit poc python3,

203

CVE_2020_2546

134

go4Hacker

Automated penetration and auxiliary systems, providing XSS, XXE, DNS log, SSRF, RCE, web netcat and other Servers,gin-vue-admin，online https://51pwn.com

116

golang-RCE-0day-POC

golang RCE 0day POC

AiCSA

GPT AiCSA(Code security audit)，SAST（Static Application Security Testing，静态应用程序安全测试），JAR security analysis, static vulnerability and vulnerability analysis of various programming language codes

hacker Tools cross-platform desktop App, support windows/MacOS/LInux ....

hackerToolsApp

Simple DNS log Server,easy to ACME DNS challenge

DNS_Server

MTX_HackerTools

weblogic T3 collections java InvokerTransformer Transformer InvokerTransformer weblogic.jndi.WLInitialContextFactory

weblogic_java_des

各种乱七八糟的收集, 51pwn.com大数据平台模糊查询

MyDocs

WS-Attacker is a modular framework for web services Security penetration testing.

WS-Attacker

Batchfile

afterLoader

冰蝎客户端源码

awesome、python、C++、linux、database、php、sql、penetration、security、infosec、javascript、tips...

awesomes

autoMITM

auto MITM attack tools

AiCSA_pub

AiCSA，Move to https://github.com/hktalent/AiCSA

51Pwn Platform，为黑客而生的大数据搜索引擎，Big data search engine born for hackers

51Pwn-Platform

CVE-2021-40865

blackIps

black Ip lists, dorks-collection

golang Simple high-performance http/https pipeline client encapsulation

reverseShell

reverse Shell

PipelineHttp

online-Hack-Tools

51pwn online Hack Tools,

OpenAI ChatGPT, GPT-3, ChatGPT-API for go,ChatGPT in bash shell command line

ChatGPT-API

go-utils

goHackTools

tlsx

tlsx, default shodan top 10 https port, support push log to bigdb

go4hacker-mails

Bulk email collection and retrieval, for hacker tools, mails dump

Scan4all_Pro

Scan4all Pro，Distributed, more optimized and faster

go-jq

bash shell command parse json for query

wget-go

Multi-threading wget golang

ip2domain

ODAT: Oracle Database Attacking Tool docker

exploit-poc

https://exploit-poc.com

hktalent

51pwn_frp

InternalAllTheThings

HTML

odat-docker

Venom shellcode SSA-RedTeam

Venom

51pwn-framework

hktalent.github.io

myapp

web app,web Microservices，Distributed service,Distributed web service

Automatically search for the required class and package it as a jar Create One Min Jar file

CreateOneMinJar

clear transparent images (jpg、png、ttf file) background color;批量去除扫描件、图片背景

yydb

clear_transparent_images_background_color

pwnjvm

ScrapySite,go Web Crawler（spider）, scraping，intelligence gathering

scrapysite

webcrawler

vps

ysoserial.net

51pwnApp

51pwn App,scan4all desktop app, rust

weblogic1411 docker vul hub

ksubdomain

子域名爆破，增加了智能爬虫功能

weblogic1411

NatTrackerServer

A fast, high performance Cross-platform lightweight Nat Tracker Server,

gohktools

golang hack APT tools

wechatbot

ersp

E2E(end to end) & P2P(peer to peer) reverse socks5 proxy

Go-Simple-HttpServer

Golang Simple HttpServer

go-pjs

golang Parse and generate java Serializable objects

vnetAutoTools

auto login vnet.link and create more links

brew tools DHT Spider save to Elasticsearch

homebrew-DHTSpider2ES

Ruby

kvDb

go Simple and lightweight key-value db

CVE-2022-45047

POC,EXP,chatGPT for me

Securitylab_advisories

get Securitylab_advisories html to local html file

https://sourceforge.net/projects/proguard/files/proguard/

Intranet_Penetration_Tips

proguard

distributed-kv

distributed key-value

Lazyrecon_bbht_docker

Bug Bounty Hunting Tools for docker

Dockerfile

fastDNS

myssr

本开源作者的书）《JavaScript高级应用与实践》之后推出的开源代码，小于100行js代码,小于10个java类, 实现json rpc for java（AJAX调用java类方法）；仅仅不到100行的javascript代码和不到10个java文件实现的超级轻量级的通过 javaScript快速调用java对象并返回任意对象的轻量级框架，并且支持级联调用，也就是说不需要额外的JavaScript编程，就可以通过javascript调用被注册的java对象并返回java对象，如果被返回的对象还有方法，这个在javascript中返回的java对象的变量，你还可以继续调用它的方法.....这就是这个轻量级json-rpc-for-java的神奇之处。从https://code.google.com/archive/p/json-rpc-for-java/迁移到此

json-rpc-for-java

webview example, easy create web Desktop app for linux、window、macOS

ComfyUI-workflows

ComfyUI workflows

webview_example

C++

books

pygeo-tutorial

Jupyter Notebook

myhktools

Research on the vulnerability of docker official image

officialImagesRS

myMqtt

MQTT demo

commix

CVE-2023-21837

POC,EXP, chatGPT for me

a1111-sd-webui-tagcomplete

POC，EXP，chatGPT for me，只能给一些思路，全部不可用

CVE-2022-21306

ysoserial

RuoYi

bug-bounty

coding_books

Detection_Dns_Hijack

Detection(find) dns hijack node js

pentest_tools

myes

golib

mac2manuf

Identify manufacturer information by mac address

htmlquery

GPT-AI-ALL

GPT AI predict

goSqlite_gorm

autoInfoDB

from Sina auto, get all auto info to json database. like car!

myocr

AI and OCR test

jrDesktop - Java Remote Desktop - is a cross-platform software for remote desktop control, remote assistance and desktop sharing http://jrdesktop.sourceforge.net

jrDesktop