Dynamic Analysis Python Packages

crosshair-tool

An analysis tool for Python that blurs the line between testing and type systems.

ethereum-dasm

An ethereum evm bytecode disassembler and static/dynamic analysis tool

kingfisher-bin

Detect secrets + live validation. Map blast radius. Revoke fast. Use the CLI or embed in Rust and Python.

trufflehog

Find, verify, and analyze leaked credentials

triton-library

Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.

kingfisher-secret-scanner

Detect secrets + live validation. Map blast radius. Revoke fast. Use the CLI or embed in Rust and Python.

cutracer

A dynamic binary instrumentation tool for tracing and analyzing GPU kernel instructions.

mobsf

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

configreach

Deterministic configuration coverage for software repositories — discover which env vars, feature flags, CLI options, config files, and deployment parameters your tests actually exercise. Codecov for configuration space.

lamda

Android Full-Stack Device Control Platform: WebRTC/H.264 remote desktop, UI/OCR/image-matching automation, one-click MITM, built-in Frida, proxy/VPN/frp/P2P networking, MCP/Agent, 160+ APIs, designed for multi-device clusters and engineered deployments.

1200km-aidebug

Evidence-focused malware reverse engineering with deep PE/.NET inspection, Ghidra reconstruction, AI cross-checks, YARA, and ELF debugging

pandare

Platform for Architecture-Neutral Dynamic Analysis

static-typing

Add static type information into Python abstract syntax trees.

agencitylab

AgencityLab is an open-source scientific Python framework for implementing, testing, and exploring the Theory of Agencity.

dexray-intercept

A Android malware analysis tool that creates comprehensive runtime profiles by hooking into application behavior across cryptography, file systems, databases, network communications, and process operations.

libdebug

A Python library to debug binary executables, your own way.

opem

OPEM (Open Source PEM Fuel Cell Simulation Tool)

malwagon

Scan a file for malware from your terminal. Automated malware analysis sandbox CLI with hypervisor-level agentless dynamic analysis, BYOVD kernel driver analysis and AI-assisted reporting. pip install malwagon

codilay

AI agent that reads a codebase file by file, builds a living Markdown reference doc, and maps how everything connects — using a wire model to track and resolve dependencies incrementally.

shooker

[Cringe] Binary static injection tool

packj

Packj stops :zap: Solarwinds-, ESLint-, and PyTorch-like attacks by flagging malicious/vulnerable open-source dependencies ("weak links") in your software supply-chain

cipherdropx

⚡ A modern, regex-only YouTube signature deciphering library written in Python. Fully dynamic parser – no JavaScript, no execution, no AST. Latest obfuscation fully supported.

kieker-for-jupyter

Kieker is an observability framework, that consists of an monitoring and tracing agent, and compatible analysis tools

skilltrace

Behavioral scanner for Claude Skills: sandboxes and traces what a skill actually does instead of trusting its description.