Cybersecurity Python Packages

pycti

Open Cyber Threat Intelligence Platform

mitreattack-python

A python module for working with ATT&CK

sherlock-project

Hunt down social media accounts by username across social networks

maigret

🕵️‍♂️ Collect a dossier on a person by username from 3000+ sites

shuffle-sdk

Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.

mockssh

Mock an SSH server and define all commands it supports (Python, Twisted)

maskops

High-speed PII masking as a Polars plugin — powered by Rust

navi-sanitize

Deterministic input sanitization for untrusted text — invisible characters, homoglyphs, and encoding tricks, handled before your code sees them. Zero dependencies, no ML. Python 3.12+.

vulncheck-sdk

A generated Python SDK from VulnCheck's OpenAPI specification

user-scanner

🕵️‍♂️ (2-in-1) Email & Username OSINT suite for deep data extraction. Analyzes 290+ scan vectors (105+ email / 185+ username) for security research, investigations, and digital footprinting.

nfstream

NFStream: a Flexible Network Data Analysis Framework.

decepticon

Autonomous Hacking Agent for Red Team

stix-shifter

This project consists of an open source library allowing software to connect to data repositories using STIX Patterning, and return results as STIX Observations.

decepticon-sdk

Autonomous Hacking Agent for Red Team

decepticon-core

Autonomous Hacking Agent for Red Team

karton-core

Distributed malware processing framework based on Python, Redis and S3.

stix-shifter-utils

This project consists of an open source library allowing software to connect to data repositories using STIX Patterning, and return results as STIX Observations.

stix-shifter-modules-splunk

This project consists of an open source library allowing software to connect to data repositories using STIX Patterning, and return results as STIX Observations.

industrialxpl-forge

The World's Largest OT/ICS/SCADA Security Assessment Framework. Python-First. 976+ modules, 150+ vendors, 50 protocols, MITRE ATT&CK for ICS 82%, SAST/LLM, 26 ICS malware TTPs.

malwaredb

MalwareDB: bookkeeping for malware, goodware, and unknown files with relationship discovery

csle-collector

A research platform to develop automated security policies using quantitative methods, e.g., optimal control, computational game theory, reinforcement learning, optimization, evolutionary methods, and causal inference.

sunglasses

Sunglasses for AI agents. Protection layer + neighborhood watch.

secator

secator - the pentester's swiss knife

nuguard

opensource repo for NuGuard