Offensive Security Python Packages

adpentest

Active Directory penetration testing framework with automatic Domain Controller detection

aptl-labs

Single-user OpenRÆ backend for creating sandboxes, cyber ranges, digital twins, and other environments.

suijin

Suijin is an open-source fully autonomous red teaming / web app pentesting framework for AI models. Powered by LangGraph, designed for bug bounty hunters and CTF players.

ptai

Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.

spaf

🎯 AI-orchestrated offensive security framework. Automated recon, CVE mapping, exploit POC generation & remediation across a discovery → validation → report pipeline. CLI · API · MCP · dashboard. Powered by Gemini, Claude, Ollama & LM Studio. Authorized testing only.

zerodom

Terminal-native DOM perception layer for AppSec and AI. Hook into live Chrome sessions, compress HTML tokens by 98.9%, and map attack surfaces deterministically.

cryptoexp

Dependency-free Python toolkit for crypto CTF and real-world crypto assessment: LLL/Coppersmith (univariate, bivariate, linearization), RSA/DSA/ECDSA attacks, CRC/LFSR, PRNG recovery, ADFGX/ADFGVX, three-state verification. 零依赖的 Python 密码学 CTF 与实战评估工具箱：格与 Coppersmith、RSA/签名攻击、CRC/LFSR、PRNG 恢复、古典密码、三态验证。

hickok

Reverse-shell handler & post-exploitation: multi-listener PTY console, payload generation, and a full SQL injection engine (union/boolean/time, native Tor). Python, no core deps.

ruoyi-scan

RuoYi (若依) dedicated vulnerability scanner: plugin architecture, three-state verdict, WAF bypass, exploit chains, AI POC generation, nuclei compatible. 若依专项漏洞扫描器

rcekit

Test a URL or captured HTTP request for RCE—and know what the evidence actually proves. RCEKit checks command injection, SSTI and blind paths, separates confirmed execution from uncertain signals and untested runs, and generates targeted payloads for Burp, ffuf and Nuclei. One Python file; no third-party dependencies.

defaultcreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️

pwnrm

PwnRM is an operator-grade Active Directory post-exploitation platform engineered directly upon the native Microsoft PowerShell Remoting Protocol (MS-PSRP) and WS-Management (MS-WSMV) standards.

offsec-ai

offsec-ai is a Python library and CLI that combines classic network reconnaissance with modern AI/LLM security testing.

wirelessxpl

Wireless attack surface & lab orchestration — PCAP, Wi-Fi, BLE, AWDL, rogue AP, mesh, Bruce wardriving. pip: wirelessxpl. BSD-3-Clause.

wraith-sec

Pipeline-based offensive security scanner: recon and web vuln testing (XSS/SQLi/IDOR/BAC), every finding double-confirmed. Python, no core deps.

bot-safe-agents

A library for fetching a list of bot-safe user agents.

0xpwn

Fully AI Agentic Pentesting & Security toolkit

reait

RevEng.AI Toolkit and Python API

breachsql

Fast SQL injection scanner with built-in exploitation — detect and extract in one command, across all major backends, with WAF evasion baked in.

basilisk-ai

Basilisk — Open-source AI red teaming framework with genetic prompt evolution. Automated LLM security testing for GPT-4, Claude, Grok, Gemini. OWASP LLM Top 10 coverage. 32 attack modules.

python-obfuscation-framework

Obfuscate Python code, stage payloads, and evade defenses

forbidden

Bypass 4xx HTTP response status codes and more. The tool is based on Python Requests, PycURL, and HTTP Client.

offensive-ai

offsec-ai is a Python library and CLI that combines classic network reconnaissance with modern AI/LLM security testing.

r-ascan

R-AScan is a modular, multithreaded vulnerability scanner framework written in Python. It dynamically loads all .py scanner modules in the scanners/ directory and executes them against a target. Each module returns structured output and is saved to a JSON file for analysis.