Attack Surface Python Packages

fray

Open-source WAF Security Testing Platform — 7,200+ attack payloads, 98 WAF/CDN fingerprints, AI-powered bypass engine, recon pipeline, beautiful CLI output

opendoor

OWASP Web Recon & Directory Discovery Platform

chiasmodon

Chiasmodon is an OSINT tool designed to assist in the process of gathering information about a target domain. Its primary functionality revolves around searching for domain-related data, including domain emails, domain credentials, CIDRs , ASNs , and subdomains, the tool also allows users to search Google Play application ID.

kosty

Scan 30+ AWS services. Find cost waste. Detect security gaps. Map your attack surface. One command.

webstor

WebStor efficiently enumerates all websites across your organization’s networks and those in your DNS records - including cloud-hosted servers via zone transfer data - stores their responses, and lets you query for known web technologies, including those with zero-day vulnerabilities.

securityforge

AI-Powered WAF Security Testing Platform — 4,025+ attack payloads, 25 WAF fingerprints, zero dependencies