Penetration Testing Tools Python Packages

vulnclaw

基于 AI Agent + MCP 工具链 + 渗透 Skill 编排， 配合大语言模型， 自然语言输入 → 自动完成「信息收集 → 漏洞发现 → 漏洞利用 → 报告生成」全流程。

whatweb

Next generation web scanner

sri-check

Python script for finding resource tags without subresource integrity.

cvequery

CVE research CLI — query Shodan's CVE database with advanced filtering and export.

aizawa

The Ninja's Choice for Web Operations

bashmator

Bashmator is a console script manager based on YAML format.

tldsearcher

A Python tool for checking top-level-domains against domain names

jwtxploiter

A cli tool to test security of JSON Web Token

jsfinder2

Find subdomains and urls in Javascript files

varoon

A tool for checking reflected parameters in URLs

vulnersx

VulnersX: A powerful tool for efficiently searching and analyzing software vulnerabilities. It provides comprehensive results with both SQLite database and text file outputs, ensuring flexibility and ease of use for security professionals and developers alike.

snetra

A Python based scanner uses shodan-internetdb to scan the IP.