Skip to content
View ysdxj's full-sized avatar

Block or report ysdxj

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
ysdxj/README.md

ysdxj

I map exposed systems, trace trust boundaries, and turn security research into reproducible tooling.

Attack Surface · Identity & Access · Adversarial Validation · Automation


Focus

  • Mapping external attack surfaces across DNS, services, and exposed interfaces.
  • Following authentication, authorization, and trust relationships to reachable impact.
  • Building compact Go and Python tooling for repeatable validation and clear evidence.

Selected work

nacos3-scopehole · Go

Verification tooling for Nacos 3.x authorization-scope issues in approved test environments.

DNS-batch-query · Python

Batch DNS record collection with selectable resolvers and record types for attack-surface mapping.

Toolbox

Go · Python · Bash · Linux · Git


Scope first. Evidence always.

Popular repositories Loading

  1. DNS-batch-query DNS-batch-query Public

    批量查询域名的DNS解析记录,支持指定DNS服务器,指定解析类型

    Python 3 1

  2. nacos3-scopehole nacos3-scopehole Public

    Nacos 3.x auth-scope vulnerability verification tool for authorized security testing

    Go 1

  3. cimbar-bigfile cimbar-bigfile Public

    Forked from peipei-labs/cimbar-bigfile

    Break libcimbar's ~10MB transfer limit by chunking large files across multiple fountain streams. Works with the sz3/cfc Android receiver, no fork required.

    HTML

  4. ysdxj ysdxj Public

    GitHub profile README for ysdxj

  5. CyberStrikeAI CyberStrikeAI Public

    Forked from AIPentest/CyberStrikeAI

    The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation improves the next.

    Go

  6. dsh-redteam-model dsh-redteam-model Public

    Forked from SeaOf0/dsh-redteam-model

    基于dsh web实现的多种模式,目的是服务于redteam进行授权的安全研究,覆盖渗透测试、红队评估、代码审计等范围领域,请勿用于非法行为。(允许二开,赋予模块各位自己的业务逻辑,方法论只有自己熟练的才好用,好的方法论=好的生态)

    Python