Pentest Python Packages

myjwt

A cli for cracking, testing vulnerabilities on Json Web Token(JWT)

objection

📱 objection - runtime mobile exploration

decepticon

Autonomous Hacking Agent for Red Team

decepticon-core

Autonomous Hacking Agent for Red Team

social-analyzer

API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites

decepticon-sdk

Autonomous Hacking Agent for Red Team

nuguard

AI red-teaming tool and LLM security framework to evaluate agentic AI applications. Tests prompt injections, handles vulnerability assessment, SBOM generation, and static analysis.

pyrdp-mitm

RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact

faraday-cli

Faraday's Command Line Interface

search-vulns

A modular tool to search for known vulnerabilities, exploits and more across various data sources

ywh2bt

YesWeHack BugTracker

pywerview

A (partial) Python rewriting of PowerSploit's PowerView

vamp-penreport

Professional Pentest Report Aggregator — VampSecure Labs

grison

A markdown hub between security scanners, Ghostwriter & BookStack

netcat

pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE)

otacon

Domain impersonation detector — typosquatting, homoglyph & combosquat detection. One command, ~10s, no paid APIs.

hickok

Reverse-shell handler & post-exploitation: multi-listener PTY console, payload generation, and a full SQL injection engine (union/boolean/time, native Tor). Python, no core deps.

bypass-url-parser

bypass-url-parser

py-nessus-pro

A python implemetation for managing Nessus Professional. It provides support for launching, configuring, monotoring and reporting for scans.

frida-gadget

Automated tool for patching APKs to enable the use of Frida gadget by downloading the library and injecting code into the main activity.

faraday-agent-dispatcher

Faraday Agent Dispatcher launches any security tools and send results to Faradaysec Platform.

wordlistxpl-forge

WordlistXPL-Forge: wordlist generation toolkit in the XPL-Forge suite

defaultcreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️

aisploit

🤖🛡️🔍🔒🔑 Tiny package designed to support red teams and penetration testers in exploiting large language model AI solutions.