Phishing Python Packages

dnstwist

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

intelmq

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

facad1ng

The Ultimate URL Masking Tool

yara-mail

A Python package and command line utility for scanning emails with YARA rules

pyphishtanklookup

Python CLI and module for PhishtankLookup

opensquat

openSquat - Detection of domain squatting, typosquatting, IDN homograph attacks, and phishing threats

certpatrol-orchestrator

Process orchestration platform for managing multiple CertPatrol instances

phishsage

PhishSage is a lightweight email triage and phishing-analysis toolkit. Extracts headers, attachments, and links, applies heuristic checks, and produces structured insights.

wifiphisher

The Rogue Access Point Framework

pytriage

PyTriage is a Python library for interacting with Cofense Triage's v1 and v2 API's.

gitem

A Github organization reconnaissance tool.

phishing-tracker

Utility to manage sets of phishing links making it easier to track their removal progress over time.

crawlerbox

An analysis pipeline for parsing and crawling evasive phishing emails

csirtg-domainsml

Predict Phishing Domains with SKLearn and Python

urlscanner

Lightweight Python CLI utility which makes use URLScan.io APIs to automate scanning and retrieving information about URLs

pythem

pentest framework

phishing-web-collector

Phishing Web Collector

certpatrol

A fast, lightweight Certificate Transparency (CT) log tailer for your terminal. Filter domains with regex, run locally for privacy, and monitor in real time — no third-party servers, no tracking. A modern, local, privacy-friendly CertStream alternative.

espoofer

An email spoofing testing tool that aims to bypass SPF/DKIM/DMARC and forge DKIM signatures.🍻

followlink

FollowLink is a Python-based command-line tool that allows you to follow and analyze URL redirects. It tracks the history of HTTP redirects, color-codes the HTTP status codes for easy identification, and calculates the total response time. This tool is useful for inspecting shortened URLs or URLs with multiple redirects.

fishfish-gg

The official FishFish client library for Python

maliciouspdf

This file implements a library and tool to make malicious PDF files.

dnstwist-mod

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

fisherman

a fisherman catches phishes - a tool to look up reputation of email addresses