Command Injection Python Packages

deadwood-sec

A self-hosted, leveled web-security range (tutorial → impossible) — the practice town for wraith & hickok. Intentionally vulnerable; localhost only.

sh-guard

Semantic shell command safety classifier for AI coding agents — AST-based risk scoring in under 100 microseconds

waymap

Waymap is a fast and optimized web vulnerability scanner built for penetration testers. It helps in identifying vulnerabilities by testing against various payloads.

wshawk

Open source toolkit for WebSocket security testing, web application penetration testing, and stateful attack validation. It combines a CLI scanner, web dashboard, Electron desktop app, browser companion, and project-backed workflows for authorized security assessments.

netshell

A lightweight HTTP CLI Shell that enables custom command injection into vulnerable web applications with a familiar shell-like interface.

mcpsnare

Active, confirmation-driven security scanner for MCP (Model Context Protocol) servers - Burp Active Scan, for MCP.

lfimap

Local File Inclusion discovery and exploitation tool

t2i-skillguard

Security scanner for AI skill files (SKILL.md) and bundled code (scripts/, tools/). It helps you catch high-risk patterns before publishing or running a skill.