Infosec Python Packages

sherlock-project

Hunt down social media accounts by username across social networks

maigret

🕵️‍♂️ Collect a dossier on a person by username from 6K websites

vulners

Official Python SDK for the Vulners vulnerability-intelligence API — search CVEs, exploits and advisories (CVSS/EPSS/KEV), audit software, Linux/Windows hosts and SBOMs, and stream the whole graph. Typed sync + async clients, 100% v3-compatible, with a built-in MCP server for AI agents.

s3scanner

Scan for misconfigured S3 buckets across S3-compatible APIs!

dirsearch

Web path scanner

user-scanner

🕵️‍♂️ (2-in-1) Email & Username OSINT suite featuring native MCP support for deep data extraction just from a single Email/Username. Analyzes 2720+ actively maintained scan vectors (210+ email / 2510+ username) for security research, investigations, and digital footprinting.

hibpwned

Python API wrapper for haveibeenpwned.com (API v3)

aptl-labs

Single-user OpenRÆ backend for creating sandboxes, cyber ranges, digital twins, and other environments.

faradaysec

Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.

deluluscan

AI-augmented, evidence-first security auditor for authorized testing — web, API, LLM/AI, container, cloud & source code. Pluggable AI (Claude/OpenAI/DeepSeek/Ollama), agentic exploitation, deep verification, multi-format reports. AGPL-3.0.

codext

Python codecs extension featuring CLI tools for encoding/decoding anything

pfsentinel

Automated backup and monitoring tool for pfSense firewalls. Supports config, RRD, DHCP, certificates, ZFS snapshots, and more via SSH/HTTPS.

dotvet

The top security tool for vibe coders — zero-config environment variable security scanner & quality gate.

pyeti-python3

Python bindings for Yeti's API

honeydb

HoneyDB Python Module

defaultcreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️

slack-watchman

Slack enumeration and exposed secrets detection tool

hawk-scanner

A powerful scanner to scan your Filesystem, S3, MySQL, Redis, Google Cloud Storage and Firebase storage for PII and sensitive data.

gyntoolkit

All-in-one Python security toolkit for reconnaissance, network scanning, vulnerability analysis and authorized penetration testing

aarya

validate the existence of email address on various online platforms, find digital footprint related to it, like Google maps contributions, reviews etc. | aarya was featured on https://osintool.org/

reconninja

⚡ ReconNinja v10.6.0— 38-phase recon framework for pentesters & bug bounty hunters. Subdomain enum → port scan → web recon → WAF/CORS/JS/cloud bucket detection → GitHub OSINT → CVE lookup → AI threat analysis → HTML report. Domains, IPs, CIDRs, target lists. Plugin system. 598 tests.

routersploit

Exploitation Framework for Embedded Devices

dshield

Pythonic interface to the Internet Storm Center / DShield API.

autopwn-suite

AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.