PyRank

Bugbounty Python Packages

Python packages with the GitHub topic bugbounty. Sorted by relevance, with stars and monthly downloads.
blacklanternsecurity
bbot

The recursive internet scanner for hackers. 🧡

75K 10K 872
maurosoria
dirsearch

Web path scanner

30K 14K 2K
qBraid
qbraid-core

Where qBraid users discuss, report bugs and submit feature requests.

21K 5 1
Ge0rg3
requests-ip-rotator

A Python library to utilize AWS API Gateway's large IP pool as a proxy to generate pseudo-infinite IPs for web scraping and brute forcing.

19K 2K 172
dalisecurity
fray

Open-source WAF Security Testing Platform — 7,200+ attack payloads, 98 WAF/CDN fingerprints, AI-powered bypass engine, recon pipeline, beautiful CLI output

13K 50 4
dwisiswant0
apkleaks

Scanning APK file for URIs, endpoints & secrets.

8K 6K 581
Impact-I
reflutter

Flutter Reverse Engineering Framework

8K 3K 290
sa7mon
s3scanner

Scan for misconfigured S3 buckets across S3-compatible APIs!

5K 3K 412
netlas-io
netlas

Netlas.io Python SDK & CLI Tool

5K 32 6
qBraid
qbraid-cli

Where qBraid users discuss, report bugs and submit feature requests.

3K 5 1
guelfoweb
knock-subdomains

Knock Subdomain Scan

3K 4K 882
yeswehack
ywh2bt

YesWeHack BugTracker

3K 21 7
RevoltSecurities
subdominator

SubDominator helps you discover subdomains associated with a target domain efficiently and with minimal impact for your Bug Bounty

2K 787 125
Spix0r
robofinder

Robofinder fetches historical robots.txt files from Archive.org to uncover old directories, hidden paths, and valuable OSINT data for reconnaissance.

2K 265 29
ihebski
defaultcreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️

2K 7K 777
roys
cewler

CeWLeR - Custom Word List generator Redefined. CeWL alternative in Python, based on the Scrapy framework.

1K 160 19
ExploitCraft
reconninja

38-phase automated reconnaissance framework for security researchers

1K 40 8
chiasmod0n
chiasmodon

Chiasmodon is an OSINT tool designed to assist in the process of gathering information about a target domain. Its primary functionality revolves around searching for domain-related data, including domain emails, domain credentials, CIDRs , ASNs , and subdomains, the tool also allows users to search Google Play application ID.

1K 696 58
blacklanternsecurity
webcap

An ultra lightweight web screenshot tool with advanced DOM analysis features.

1K 44 5
Escape-Technologies
graphinder

🕸️ Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. 🕸️

976 228 14
LeakIX
leakix

Python Client to LeakIX API

973 26 8
metlo-labs
metlo

The Python Agent for Metlo

826 2K 105
xcalts
scopez

Scopez verifies connectivity to target servers, reveals CDN presence, and provides detailed target insights like reachability and RDAP.

765 9 0
m8sec
taser

Python resource library for creating security related tooling

760 77 13