This repository contains a Python 3 script designed to exploit the ClamAV privilege escalation vulnerability.
-
Updated
Dec 1, 2023 - Python
#
exploitation-and-pentesting
Here are 7 public repositories matching this topic...
SubGhost is a powerful subdomain discovery tool. It helps you discover hidden or less visible subdomains for a given domain using public API services. The tool is designed to be simple to use while offering great flexibility, such as the ability to choose the output format for results.
python cloud-security api-security dns-analysis web-scraping-and-data-extraction subdomain-reconnaissance passive-reconnaissance cybersecurity-automation phishing-and-attack-reconnaissance internet-infrastructure-analysis credential-and-secret-management privacy-and-anonymity exploitation-and-pentesting collaboration-and-data-sharing machine-learning-and-artificial-intelligence dns-amplification-attacks security-monitoring-and-incident-response
-
Updated
Jan 21, 2025 - Python
Hash cracking toolkit built for educational and ethical purposes.
cybersecurity penetration-testing password-safety brute-force pentesting pentest offensive-security ethical-hacking red-team educational-project hash-cracker exploitation-tool exploitation-and-pentesting
-
Updated
Jan 20, 2026 - Python
SubGhost is a powerful subdomain discovery tool. It helps you discover hidden or less visible subdomains for a given domain using public API services. The tool is designed to be simple to use while offering great flexibility, such as the ability to choose the output format for results.
python api-security dns-analysis web-scraping-and-data-extraction subdomain-reconnaissance passive-reconnaissance cybersecurity-automation phishing-and-attack-reconnaissance credential-and-secret-management privacy-and-anonymity exploitation-and-pentesting collaboration-and-data-sharing dns-amplification-attacks security-monitoring-and-incident-response
-
Updated
Feb 23, 2026
This repository contains the package layout and bundled files I have for Cobalt Strike 4.9.
-
Updated
May 1, 2026 - Shell
ANST delivers 60 powerful hping3-based attacks (ICMP/TCP/UDP) across 5 categories: BASIC → HYPER‑AGGRESSIVE. Features verbose live output, interactive menu, and smart one‑time dependency install. Perfect for authorised network stress‑testing, firewall validation, and educational security research.
ddos networking tcp dhcp udp icmp stress-testing active penetration smashing penetration-testing-tools ethical-hacking-tools exploitation-tool exploitation-and-pentesting gray-hat-hacking-tools anst-tool sylhetyhackvenger the-error808
-
Updated
Jul 13, 2026 - Python
Personal TryHackMe write-ups, notes and methodologies covering advanced web application exploitation, custom tooling, cryptographic attacks, vulnerability chaining and WAF bypass techniques.
python3 cybersecurity penetration-testing web-security writeups exploitation ethical-hacking web-application-security red-teaming cryptographic-attacks waf-bypass tryhackme client-side-attacks web-pentesting llm-security exploitation-and-pentesting exploitation-techniques
-
Updated
Jul 13, 2026
Improve this page
Add a description, image, and links to the exploitation-and-pentesting topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the exploitation-and-pentesting topic, visit your repo's landing page and select "manage topics."