Ctf Python Packages

pwntools

CTF framework and exploit development library

barectf

Generator of ANSI C tracers which output CTF data streams

rust-demangler

Python module for demangling rust function names

flask-unsign

Command line tool to fetch, decode, brute-force and craft session cookies of a Flask application by guessing secret keys.

myjwt

A cli for cracking, testing vulnerabilities on Json Web Token(JWT)

flask-unsign-wordlist

The following package is the standalone wordlist-only component to flask-unsign.

gdb-mcp

Model Context Protocol server for driving GDB from an LLM.

pwn

CTF framework and exploit development library

exegol

Fully featured and community-driven hacking environment

ciphey

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

exploitfarm

ExploitFarm is an attacker and flag submitter for A/D CTF

adscan

Free Active Directory pentesting tool for Linux, macOS and Windows. Automates AD and LDAP enumeration, Kerberoasting, ASREPRoast, password spraying, ADCS/ESC1, DCSync, RBCD, gMSA, shadow credentials, NTLM relay and credential dumping across 104 techniques, mapping BloodHound-compatible attack paths to Domain Admin. NIS2 / ISO 27001 reports.

pawnlogic

A modular AI Agent framework designed for complex task orchestration and logic reasoning.

factordb-pycli

FactorDB client library with Python

ropnroll

Semantic ROP/JOP gadget finder and automatic exploit-chain synthesizer for Windows PE binaries

vagd

VirtuAlization GDb integrations in pwntools

openctf-server

OpenCTF is a lightweight, jeopardy-style capture-the-flag platform for classroom labs, private competitions, and security training sessions.

reverify

Stop your AI from making things up — it proposes, deterministic tools decide, every claim checked against ground truth with evidence. Grounded facts and context survive resets. Reverse engineering is the proving ground. MCP server + CLI.

xfarm

ExploitFarm is an attacker and flag submitter for A/D CTF

ptai

Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.

rootme-sdk

Unofficial typed Python SDK for Root-Me accounts and challenges (alpha).

autofte

Local-first crash triage for fuzzing output: stack-hash dedup, binary mitigation analysis, and offline LLM-assisted write-ups. No exploitation, nothing leaves your machine.

stego-lsb

Least Significant Bit Steganography for bitmap images (.bmp and .png), WAV sound files, and byte sequences. Simple LSB Steganalysis (LSB extraction) for bitmap images.

codext

Python codecs extension featuring CLI tools for encoding/decoding anything