cdxy

POC-T. 渗透测试插件化并发框架 / Open-sourced remote vulnerability PoC/EXP framework

1000php. 1000个PHP代码审计案例(2016.7以前乌云公开漏洞)

BadUSB-code. 收集badusb的一些利用方式及代码

DirBrute. 多线程WEB目录爆破工具 [Multi-thread WEB directory blasting tool(with dics inside) ]

FileSensor. Dynamic file detection tool based on crawler 基于爬虫的动态敏感文件探测工具

BingC. 基于Bing搜索引擎的C段/旁站查询，多线程，支持API

baiduyun-brute. [已失效] 多线程百度云(私密分享)密码爆破工具 pan.baidu.com

waf-bypass.

Drystan. Automated information gathering tool for pentest

zZone-Transfer. DNS域传送漏洞探测工具。多线程，批量探测，漏洞利用，简单网页采集。(DNS zone transfer vulnerability Vulnerability detection tool, support multithreading,batch scanning and vulnerability exploitation)

Campus-FakeAP. 针对校园网的wifi钓鱼工具

JBoss-exp. java反序列化漏洞利用－JBOSS(含payload生成的java项目，漏洞利用py脚本，shodan部分目标主机搜索结果)

datacon_2019_DNS. https://www.cdxy.me/?p=806

XCTF-2019-tfboys. source code of XCTF 2019 Final web task "tfboys"

corePython. 《Python 核心编程 第二版》 (《Core Python Programming 2nd Edition》) 学习笔记、事例代码以及课后练习

Some-PoC-oR-ExP. 各种漏洞poc、Exp的收集或编写

MyScript. Python

mind-mapping. 思考与总结

ML. figure everything out

TaintSee. 第八届全国大学生信息安全竞赛 一等奖项目：TaintFlow安卓隐私泄漏流向监控防护系统 的“用户控制模块“ 中的用户操作界面

pocserver. Scripts running in public webserver for vulnerability PoC

docker-k8s-exploit-demo. for product alert demo

Juneberry-Cat. Juneberry图书馆座位管理系统 - 自动化预约脚本(通用在线平台 + 校内预约平台)

GourdScanV2. 被动式漏洞扫描系统

Blasting_dictionary. 爆破字典

pocscan-cli. 模拟登录，自动提交pocscan扫描任务

exps. my exps and scripts

x-waf. 适用于中小企业的云waf

XCTF-2018-Final-WEB2-PUBG. PHP

sudo_fishing_demo. Shell

lamp. 学习代码及笔记

pyantom. How about automated python security auditing

SpiderHub. My SpiderHub

checkio. my solution and analysis from CheckiO

CVE-2017-16995. Linux Kernel Version 4.14 - 4.4 (Ubuntu && Debian)

LANs.py. Inject code, jam wifi, and spy on wifi users

webshell_gitment.

Pocsuite. Pocsuite 是知道创宇安全研究团队打造的一款开源的远程漏洞测试框架，Pocsuite is an open-sourced remote vulnerability testing framework developed by the Knownsec Security Team.

wooyunMonitor. wooyun.org 集市商品刷新通知

dirsearch. Web path scanner

wifiphisher. Automated phishing attacks against Wi-Fi networks

ftx-trade-crawler. TSQL

DOM-Scripting. codes while learning "DOM Scripting: Web Design with JavaScript and the Document Object Model"

websoc-cli. 从文本中匹配IP并自动创建WebSOC扫描任务