Cybersecurity Tools Python Packages

user-scanner

🕵️‍♂️ (2-in-1) Email & Username OSINT suite featuring native MCP support for deep data extraction just from a single Email/Username. Analyzes 2720+ actively maintained scan vectors (210+ email / 2510+ username) for security research, investigations, and digital footprinting.

malwaredb

MalwareDB: bookkeeping for malware, goodware, and unknown files with relationship discovery

ziran

ZIRAN finds the vulnerabilities in AI agents that come from tools combining, not from any single prompt. Graph-based tool chain discovery, execution-level side-effect detection, multi-phase campaigns.

aptl-labs

Single-user OpenRÆ backend for creating sandboxes, cyber ranges, digital twins, and other environments.

darktrace-sdk

Darktrace SDK with full Endpoint/Parameter support. Easy install via pip

cybersecurity-browser-extension-agent

Final Years Project

embedxpl

Embedded Device Security Assessment Framework — 700 modules, 350 CVEs, 55 vendors, APT Group Engine. Covers routers, IP cameras, GPON ONTs, ISP CPEs, IoT/embedded edge.

industrialxpl-forge

The World's Largest OT/ICS/SCADA Security Assessment Framework. Python-First. 976+ modules, 150+ vendors, 50 protocols, MITRE ATT&CK for ICS 82%, SAST/LLM, 26 ICS malware TTPs.

honeypot-auditor

Does This Look Like An Honeypot? (DTLLAH) Multi-protocol CLI that fingerprints whether a target IP behaves like an honeypot — using Honeyscore, active auth/state probes, and a weighted score.

uxsp

Universal Exchange Security Protocol (UXSP)

wordlistxpl-forge

WordlistXPL-Forge: wordlist generation toolkit in the XPL-Forge suite

nebula-ai

AI-powered penetration testing assistant for automating recon, note-taking, and vulnerability analysis.

3way

WiFi Penetration Testing & Auditing Tool

uhbs

Universal Honeypot Benchmarking Standard (UHBS) v5.0.x — open-source framework for vendor-neutral honeypot / deception evaluation

aarya

validate the existence of email address on various online platforms, find digital footprint related to it, like Google maps contributions, reviews etc. | aarya was featured on https://osintool.org/

pyrsistencesniper

We took PersistenceSniper, merged it with Python, and misspelled it on purpose. Meet PyrsistenceSniper.

devsecops-radar

🛡️ Unify Trivy, Semgrep, Poutine & Zizmor scans into one AI-enhanced, offline-ready dashboard. Track CI/CD security trends, get LLM-powered analysis, and enforce policies — the open-source DevSecOps command center.

subx-recon

SubX is an open-source asset discovery framework that helps security professionals uncover and map internet-facing assets through subdomain enumeration and reconnaissance techniques.

dumpdork

Search-driven OSINT and reconnaissance toolkit for web and GitHub discovery.

argus-header

HTTP Header Security Analyzer

wirelessxpl

Wireless attack surface & lab orchestration — PCAP, Wi-Fi, BLE, AWDL, rogue AP, mesh, Bruce wardriving. pip: wirelessxpl. BSD-3-Clause.

autopwn-suite

AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.

endpointscanner

Website endpoint recon tool and rate limit tester that can bypass simple captchas and WAFs.

phonsint

🕵️‍♂️ Advanced phone number OSINT suite engineered for silent reconnaissance. Extracts masked emails, profile avatars and uncovers cross-platform account registrations, and enriches identity footprints with zero SMS alerts.