PyRank
  • Search
  • PyPI
  • GitHub
  • Insights
  • Compare
  • Advisories
  • Ecosystem
  • About

Penetration Testing Tools Python Packages

Python packages with the GitHub topic penetration-testing-tools. Sorted by monthly downloads, with stars and forks.
DrXOps
pentool

A modern, console-based web penetration testing toolkit with a TUI. Features an HTTP/HTTPS proxy, active/passive vulnerability scanner, Repeater, Intruder, Spider, and more. Free & open-source.

3K 8 0
0xwi11iam
suijin

Suijin is an open-source fully autonomous red teaming / web app pentesting framework for AI models. Powered by LangGraph, designed for bug bounty hunters and CTF players.

3K 17 4
mariorobertofortunato
rosal

ROSAL (Reverse Obfuscated Standard Android Libraries)

2K 0 0
Netw0rkNoob
vulnclaw

基于 AI Agent + MCP 工具链 + 渗透 Skill 编排, 配合大语言模型, 自然语言输入 → 自动完成「信息收集 → 漏洞发现 → 漏洞利用 → 报告生成」全流程。

2K 4K 488
hdyrawan
w4f

A lightweight edge attribution and exposure-context engine that determines what infrastructure sits between an Internet-facing service and its origin, using multiple independent network, TLS, DNS and HTTP signals.

1K 0 1
rmhowe425
flowhound

Automated security testing and exploitation framework for vulnerable AI platform deployments.

1K 0 0
4armed
sri-check

Python script for finding resource tags without subresource integrity.

646 43 8
jakbin
whatweb

Next generation web scanner

600 8 1
MattKeeley
spoofy

Spoofy is a program that checks if a list of domains can be spoofed based on SPF and DMARC records.

418 775 83
n3th4ck3rx
cvequery

A powerful command-line tool to search and analyze CVE (Common Vulnerabilities and Exposures) data using Shodan's public CVE database API.

292 1 0
DontPanicO
jwtxploiter

A tool to test security of json web token

149 293 33
vinzekatze
bashmator

Bashmator is a console script manager based on YAML format.

145 5 0
richardschwabe
jsfinder2

Find subdomains and urls in Javascript files

143 3 0
elliottophellia
aizawa

Aizawa is a command-line webshell designed to execute commands through HTTP header

137 65 10
plague-anon
tldsearcher

A Python tool for checking top-level-domains against domain names

109 5 0
R0X4R
varoon

A tool for checking reflected parameters in URLs.

68 1 0
R0X4R
snetra

A Python based scanner uses shodan-internetdb to scan the IP.

64 32 6
symbolexe
vulnersx

VulnersX: A powerful tool for efficiently searching and analyzing software vulnerabilities. It provides comprehensive results with both SQLite database and text file outputs, ensuring flexibility and ease of use for security professionals and developers alike.

42 0 0
    • Original data from PyPI, GitHub, and OSV; downloads served through ClickHouse
    • Sources & methodology