πŸ“ˆ GH Trending Explorer 🎲 Surprise me

Search: exploitation Β· Language: Python Β· clear

ljagiello / ctf-skills

Agent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more

β–² ~21/7d β˜… 3.5k Python 1d ago
samugit83 / redamon

Open-source, self-hosted AI penetration testing framework: maps your attack surface into a graph, autonomously exploits it from a Kali sandbox with human approval gates, and opens PRs that fix what it finds. MCP both ways: plug in any MCP server as a tool, or drive RedAmon from Claude Code or your own agent.

β–² ~14/7d β˜… 3.2k Python 1d ago
malwaredllc / byob

An open-source post-exploitation framework for students, researchers and developers.

β–² ~7/7d β˜… 9.5k Python 3d ago
glask1d / WebHawk

The WebHawk Framework is a tool used for authorized enumeration and exploitation of webservers.

β–² ~7/7d β˜… 42 Python 10d ago
commixproject / commix

Automated Ξ‘ll-in-One OS command injection exploitation tool.

β–² ~0/7d β˜… 5.9k Python today
codingo / NoSQLMap

Automated NoSQL database enumeration and web application exploitation tool.

β–² ~0/7d β˜… 3.4k Python 8d ago
GamehunterKaan / AutoPWN-Suite

AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.

β–² ~0/7d β˜… 1.1k Python today
prbhtkumr / PhoneSploit

A tool for remote ADB exploitation in Python3 for all Machines.

β–² ~0/7d β˜… 896 Python 18d ago
Frissi0n / GTFONow

Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries using GTFOBins.

β–² ~0/7d β˜… 642 Python 5d ago
DeathShotXD / Comment2Shell

Comment2Shell is a zero click pre auth RCE exploit for WordPress CVE-2026-93485. An anonymous comment plants stored XSS that fires when an admin views the post and drops a self deleting webshell. Full chain PoC with scanner interactive shell Nuclei template and Docker

β–² ~0/7d β˜… 64 Python 15d ago
tc4dy / CVE-2026-54121-PoC-Exploit

CVE-2026-54121 - CertiGhost AD CS Multi-Exploit Framework | Rogue DC + LDAP spoofing, certificate abuse, PKINIT hash extraction, auto DCSync. Safe Checker + full exploit, multi-threaded mass scan, Shodan integration, JSON/CSV/JSONL output. CVSS 8.8 High. Use Ethically, Stay Legal :v