Opsec Python Packages

metacls

Bulk metadata scrubbing for PDF, Office and image files — CLI, local web UI and a REST API, with a before/after proof report.

phantomsignal

The OPSEC-native OSINT framework: a stealth egress layer (proxy pool, adaptive pacing, JA3/JA4) under every module + an honest per-scan report of what you leaked. DNS/port/tech recon, nuclei vuln scanning, 54+ intel sources (many keyless), identity Profiler, best-of-breed engine orchestration. Web · CLI · REST. pip install phantomsignal

antiflock

Self-hosted counter-surveillance for the networks you control: map device and network exposure, verify trusted routes, and hold sensitive actions when the trusted path drops — every decision signed into a local audit log. Go + React, Apache-2.0. Pre-alpha, simulation-first.

noisehound

Detection-aware BloodHound attack-path scoring - the quietest route to your objective, calibrated across five detection tiers (audit/EDR/Elastic/MDI/WDAC) plus Azure.

scrubproof

Strips metadata from 71 file formats and proves it by searching the output bytes. Your PDF scrubber is probably lying to you.

cwv-scanner

This is a simple web application vulnerability scanner that checks if a given URL or IP address is vulnerable to 36 common web application security vulnerabilities. The tool is designed to help website owners and security researchers identify vulnerabilities in their web applications that can be exploited by attackers.

netwatch-scan

NETWATCH is a terminal-based security monitoring tool that gives you continuous, live visibility into every active network connection on your machine, with automatic risk scoring, GeoIP intelligence, VPN status, process path validation, and new-connection alerting.