Skip to content
View chu0119's full-sized avatar

Highlights

  • Pro

Block or report chu0119

Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
chu0119/README.md

星川 / xingchuan — Security Researcher & Tool Builder

研究方向 · Focus

代表项目 · Selected Work

fscan-toolkit — Security Workflow UX

zhidun — AI Threat Analysis

DarkForest-Hunter — Exposure Defense

log-audit — Detection Engineering

xingchuan-ti — Threat Intelligence

AegisIR — Incident Response

能力矩阵与经历认可 · Capabilities, Experience and Recognition

开源数据 · Open Source Signal

公开仓库工程数据

公开源码仓库主要语言

最近公开动态 · Recent Public Activity

协作 · Open to Collaboration

文字版项目说明与无障碍内容 · Accessible text version

星川 / xingchuan

Security Researcher & Tool Builder

把安全信号转化为可执行的检测、响应与工程化工具。
Turning security signals into practical detection, response, and engineering systems.

研究方向 · Focus

  • 攻防与漏洞研究 / Offensive Security & Vulnerability Research — 面向授权场景的漏洞发现、验证与治理。
  • 检测、研判与响应 / Detection, Threat Intelligence & IR — 从日志与流量中提取线索,形成可解释的安全结论。
  • AI 安全自动化 / AI-powered Security Tooling — 用智能工作流缩短侦察、分析、处置与报告链路。

代表项目 · Selected Work

能力矩阵 · Capabilities

Security Engineering · Detection & Response · Python · TypeScript · LLM Agent · Linux · Docker · MySQL · Redis

经历与认可 · Experience & Recognition

  • 2023 — Now: Security engineering practice covering operations, vulnerability governance, log analysis, and automation tooling.
  • Recognition: National and provincial experience in enterprise information security, security management assessment, and AI literacy competitions.
  • Principle: Build for real workflows — turn reconnaissance, detection, response, and reporting into reusable toolchains.

开源数据 · Open Source Signal

Metrics are generated daily from explicitly public repositories through the GitHub API. No private activity or third-party stats image service is used.

最近动态 · Recent Activity

协作 · Collaboration

欢迎围绕安全工具、威胁检测、应急响应与 AI 安全自动化交流协作。
Open to collaboration on practical security tooling, detection engineering, incident response, and AI-assisted security workflows.

All security research and tooling is intended for authorized testing, defensive research, and education.

Pinned Loading

  1. zhidun zhidun Public template

    星川智盾 - AI 驱动的网站日志安全分析系统 | Cyberpunk-themed AI-powered web log security analyzer

    TypeScript 24 3

  2. DarkForest-Hunter DarkForest-Hunter Public

    🌲 DarkForest Hunter — 公开仓库泄露 AI API Key 扫描与验证,覆盖 35 个 AI 平台(DeepSeek / Kimi / 智谱 / Qwen / OpenAI / Gemini / Claude / Groq / OpenRouter 等),只读优先验证 + 余额查询,24/7 watch + 高价值邮件告警;内嵌 mihomo 多 IP 代理与 heade…

    Python 19 5

  3. fscan-toolkit fscan-toolkit Public

    fscan 图形化管理工具套件 — 命令生成器 + 报告解析器,零依赖纯静态 HTML

    HTML 26

  4. edusrc-hunter edusrc-hunter Public

    EDUSRC教育漏洞挖掘技能 - 通过Burp MCP进行信息收集、资产发现、漏洞扫描和报告生成,专注于真实可上报的高危漏洞

    Shell 5

  5. xingchuan-ti xingchuan-ti Public

    星川威胁情报助手 - 划词识别 IP/域名,多源威胁情报加权研判 + 一键跳转国内主流情报平台

    TypeScript 10 3

  6. ARTEX ARTEX Public

    AI 自主渗透测试 · 红队作战平台 | 多 Agent 自主推进 · 漏洞情报运营 · 后渗透与 C2 | LLM 三通道轮询 | 全程证据留痕 | 原百度攻防赛冠军项目独立演进版

    Go 30 17