Offensive Security Python Packages

hickok

Reverse-shell handler & post-exploitation: multi-listener PTY console, payload generation, and a full SQL injection engine (union/boolean/time, native Tor). Python, no core deps.

wraith-sec

Pipeline-based offensive security scanner: recon and web vuln testing (XSS/SQLi/IDOR/BAC), every finding double-confirmed. Python, no core deps.

ptai

Offensive-security MCP server with 205 wrapped tools, 17 specialist agents, and 60 SPA-aware probes for OWASP Top 10. CLI + MCP, BYO LLM. No API key needed on MCP path.

wirelessxpl

Wireless attack surface & lab orchestration — PCAP, Wi-Fi, BLE, AWDL, rogue AP, mesh, Bruce wardriving. pip: wirelessxpl. BSD-3-Clause.

wfh-wordlist

The most comprehensive wordlist generation toolkit for pentest, red team, and security research. 25 subcommands: charset, profile, corp-users, default-creds, password-dna, DNS fuzzing, web scraping, ISP keygen, ICS/SCADA credentials, ML training, pipal analysis, and more. Python 3.8+ | pip install wfh-wordlist

defaultcreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️

offsec-ai

offsec-ai is a Python library and CLI that combines classic network reconnaissance with modern AI/LLM security testing.

aihound

Credential Scanner for Popular Desktop AI Platforms

r-ascan

Dynamic web security scanner with normalized JSON and HTML reporting

cepheus-engine

Container escape scenario modeler — enumerate container security posture and model realistic escape paths

python-obfuscation-framework

Obfuscate Python code, stage payloads, and evade defenses

basilisk-ai

Basilisk — Open-source AI red teaming framework with genetic prompt evolution. Automated LLM security testing for GPT-4, Claude, Grok, Gemini. OWASP LLM Top 10 coverage. 32 attack modules.

o1op

Deterministic code synthesis operator — zero LLM in the loop. 8-color algebraic type system, 7-pass causal inference, 7-layer verification, 9-phase autonomous engagement. Substrate validated across 9 IEEE 2026 papers + IBM z/OS production assessment.

0xpwn

Fully AI Agentic Pentesting & Security toolkit

pentest-framework

Low-noise pentest orchestration: recon + scanning + passive checks normalized into one schema, deduplicated, and rendered to a professional PDF.

gitlab-harvester

Global term search for GitLab via gitlab-python

reait

RevEng.AI Toolkit and Python API

subsurfer

Recon Subdomain Scan Tool

raccoon-scanner

A high performance offensive security tool for reconnaissance and vulnerability scanning

tp-vulnbox

VulnBox is a container that is intentionally designed with vulnerabilities to allow security professionals to practice and improve their offensive security skills, such as penetration testing and vulnerability assessment

credwolf

Validate AD credentials over NTLM and Kerberos - passwords, hashes, keys, and tickets

black-widow

GUI based offensive penetration testing tool (Open Source)

rlm-toolkit

AI Security Platform: Defense (61 Rust engines + Micro-Model Swarm) + Offense (39K+ payloads)

sentinel-llm-security

AI Security Platform: Defense (61 Rust engines + Micro-Model Swarm) + Offense (39K+ payloads)