Ethical Hacking Python Packages

mockssh

Mock an SSH server and define all commands it supports (Python, Twisted)

user-scanner

🕵️‍♂️ (2-in-1) Email & Username OSINT suite featuring native MCP support for deep data extraction just from a single Email/Username. Analyzes 2720+ actively maintained scan vectors (210+ email / 2510+ username) for security research, investigations, and digital footprinting.

ptai

Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.

pyadrecon-adws

An implementation of PyADRecon using ADWS instead of LDAP. Generates individual CSV files and a single XSLX + HTML report about your AD domain. Evades EDR detections through ADWS.

agentic-bug-hunter

AI-powered bug bounty hunting toolkit that works with or without subscription.

embedxpl

Embedded Device Security Assessment Framework — 700 modules, 350 CVEs, 55 vendors, APT Group Engine. Covers routers, IP cameras, GPON ONTs, ISP CPEs, IoT/embedded edge.

pyadrecon

Python3 implementation of ADRecon with support for NTLM and Kerberos authentication querying LDAP. Generates individual CSV files and a single XSLX + HTML report about your AD domain.

apknife

APKnife is an advanced APK analysis and modification tool designed for security researchers and ethical hackers. It allows users to extract, analyze, modify, and sign APK files. The tool provides features like APK extraction, AndroidManifest.xml editing, API call detection, vulnerability scanning, and APK signing

nebula-ai

AI-powered penetration testing assistant for automating recon, note-taking, and vulnerability analysis.

gyntoolkit

All-in-one Python security toolkit for reconnaissance, network scanning, vulnerability analysis and authorized penetration testing

pwnrm

PwnRM is an operator-grade Active Directory post-exploitation platform engineered directly upon the native Microsoft PowerShell Remoting Protocol (MS-PSRP) and WS-Management (MS-WSMV) standards.

atdork

tools auto dorking with multi enggine search

reconninja

⚡ ReconNinja v10.6.0— 38-phase recon framework for pentesters & bug bounty hunters. Subdomain enum → port scan → web recon → WAF/CORS/JS/cloud bucket detection → GitHub OSINT → CVE lookup → AI threat analysis → HTML report. Domains, IPs, CIDRs, target lists. Plugin system. 598 tests.

bot-safe-agents

A library for fetching a list of bot-safe user agents.

babysploit

:baby: BabySploit Beginner Pentesting Toolkit/Framework Written in Python :snake:

breachsql

Fast SQL injection scanner with built-in exploitation — detect and extract in one command, across all major backends, with WAF evasion baked in.

forbidden

Bypass 4xx HTTP response status codes and more. The tool is based on Python Requests, PycURL, and HTTP Client.

hunterxsec

AI-Assisted Vulnerability Discovery, Validation & Proof Engine

happy-frog

HID emulation framework for cybersecurity learning. Generate HID in simple to create .txt without the need for proprietary controllers, no binary needed.

whitehat

Python Packages For Ethical Hacking

phantomsignal

The OPSEC-native OSINT framework: a stealth egress layer (proxy pool, adaptive pacing, JA3/JA4) under every module + an honest per-scan report of what you leaked. DNS/port/tech recon, nuclei vuln scanning, 54+ intel sources (many keyless), identity Profiler, best-of-breed engine orchestration. Web · CLI · REST. pip install phantomsignal

brs-xss

MIT license BRS-XSS is a modular Python CLI scanner for XSS vulnerabilities. Features context-aware payloads, WAF evasion, DOM analysis via Playwright, ML-based risk scoring, and export in HTML/JSON/SARIF. Designed for integration with Brabus Recon Suite (BRS).

zen-ai-pentest

🛡⚔️AI-Powered Penetration Testing Framework with automated vulnerability scanning, multi-agent system, and compliance reporting🛡⚔️

nexus-sec

Nexus — offline, evidence-gated red+blue security agent. Every finding is proven by the target's own response; no hallucinated vulns. pip install nexus-sec