Pentest Tool Python Packages

dirsearch

Web path scanner

adscan

Free Active Directory pentesting tool for Linux, macOS and Windows. Automates AD and LDAP enumeration, Kerberoasting, ASREPRoast, password spraying, ADCS/ESC1, DCSync, RBCD, gMSA, shadow credentials, NTLM relay and credential dumping across 104 techniques, mapping BloodHound-compatible attack paths to Domain Admin. NIS2 / ISO 27001 reports.

pentool

A modern, console-based web penetration testing toolkit with a TUI. Features an HTTP/HTTPS proxy, active/passive vulnerability scanner, Repeater, Intruder, Spider, and more. Free & open-source.

evil-winrm-py

Execute commands interactively on remote Windows machines using the WinRM protocol (just faster)

netcat

pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE)

linkook

🔍 An OSINT tool for discovering linked social accounts and associated emails across multiple platforms using a single username.

wordlistxpl-forge

WordlistXPL-Forge: wordlist generation toolkit in the XPL-Forge suite

crosslinked

LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping

habu

Hacking Toolkit

pwncat

pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE)

endpointscanner

Website endpoint recon tool and rate limit tester that can bypass simple captchas and WAFs.

smtp-user-enum

SMTP user enumeration via VRFY, EXPN and RCPT with clever timeout, retry and reconnect functionality.

babysploit

:baby: BabySploit Beginner Pentesting Toolkit/Framework Written in Python :snake:

webcap

An ultra lightweight web screenshot tool with advanced DOM analysis features.

printerxpl-forge

Complete printer penetration testing toolkit with 109 commands across PJL, PostScript & PCL. 4 network protocols, automated discovery, file exfiltration, NVRAM access, attack payloads. Modern Python 3.8+ offensive security tool.

vigil-redteam

A Cyber Security Reseach tool created to help ship better and complete products.

gitbleed

Tool to dump and reconstruct an entire Git repository from a publicly exposed .git folder on a web server.

zimkk-vigil

A Cyber Security Reseach tool created to help ship better and complete products.

mptsec

The MPT (Mobile Pentest Toolkit) is a must-have solution for your android penetration testing workflow.

gitxray

A multifaceted security tool which leverages Public GitHub REST APIs for OSINT, Forensics, Pentesting and more.

kautolog

Automatic terminal session logging for Bash and Zsh. Captures every command, prompt, and output in real time, with per-session files, replay support, and optional cloud sync. Ideal for security exams, compliance, and forensic recordkeeping.

raccoon-scanner

A high performance offensive security tool for reconnaissance and vulnerability scanning

franki-cli

AI-powered terminal CLI for developers & security pros. Free multi-provider fallback, pentest workflows, MITRE mapping.

webanalyzer-security

Open-source attack-surface scanner: subdomains, DNS, tech stack and vulnerabilities in one command. SARIF for GitHub Code Scanning, a GitHub Action, a web dashboard, and plugins that are one file each.