clpzbug/clpzcode

★ 14TypeScriptAudience · ops devopsComplexity · 4/5LicenseSetup · moderate

Mindmap

mindmap
  root((clpzcode))
    Attack phases
      Subdomain recon
      Vuln scanning
      Exploitation
      Privilege escalation
    Targets
      Web applications
      Active Directory
    AI providers
      xAI Grok
      OpenAI
      Ollama local
    Features
      Parallel agents
      Multi-model support

mindmap root((clpzcode)) Attack phases Subdomain recon Vuln scanning Exploitation Privilege escalation Targets Web applications Active Directory AI providers xAI Grok OpenAI Ollama local Features Parallel agents Multi-model support

Click or tap to explore — scroll the page freely

Things people build with this

USE CASE 1

Run automated end-to-end penetration testing on an authorized target URL covering subdomain enumeration, vulnerability scanning, exploitation, and privilege escalation

USE CASE 2

Test Active Directory environments by pointing the tool at a domain controller for enumeration and credential extraction

USE CASE 3

Run parallel reconnaissance and exploitation agents on multiple targets simultaneously using different AI models

USE CASE 4

Use locally running Ollama models for offline or air-gapped penetration testing work

Tech stack

TypeScriptNode.jsnpm

Getting it running

Difficulty · moderate Time to first run · 30min

Requires API keys for at least one AI provider, intended only for use against systems you have explicit written authorization to test.

Use freely for any purpose including commercial, keep the copyright notice.

In plain English

clpzcode is a command-line tool for security testing and penetration testing, built as a fork of Claude Code, the AI coding assistant from Anthropic. It takes the underlying agent framework and adds offensive security capabilities on top: given a target URL, it can run a full sequence of reconnaissance, vulnerability scanning, exploitation, and privilege escalation steps without you having to script each phase manually. When you give it a target, the tool enumerates subdomains, discovers endpoints, fingerprints the technology stack, and tests for vulnerabilities across 29 different categories in parallel. When it confirms a finding, it does not stop at reporting it. It attempts exploitation and, if successful, follows a built-in escalation chain. For example, finding a server-side request forgery vulnerability leads it to probe cloud metadata endpoints, extract credentials, and enumerate storage. Finding a SQL injection leads it toward shell access and further privilege escalation. A separate command handles Active Directory environments: given a domain controller IP and a domain name, it runs the standard steps used in internal network testing from initial enumeration through to extracting the domain's credential database. The tool also supports running multiple agents simultaneously on different tasks, so reconnaissance, exploitation, and Active Directory enumeration can run in parallel on different AI models. Unlike the upstream Claude Code, which is limited to Anthropic's own models, clpzcode supports a range of AI providers including xAI Grok, OpenAI, Google Gemini, GitHub Models, and locally run models through Ollama. You can switch providers mid-session. The project is written in TypeScript, installable via npm, and licensed under MIT.

Copy-paste prompts

Prompt 1

I have written authorization to test example.com. How do I run clpzcode against it and get a full vulnerability report?

Prompt 2

Using clpzcode Active Directory mode, how do I enumerate a domain controller at 192.168.1.10 and attempt privilege escalation?

Prompt 3

How do I configure clpzcode to use a locally running Ollama model instead of a cloud AI API?

Prompt 4

How do I run multiple clpzcode agents in parallel, one doing recon and one doing exploitation, on different authorized targets?

Open on GitHub → Explain another repo

← clpzbug on gitmyhub — every repo by this author, as a profile.

Verify against the repo before relying on details.