Phishing Python Packages

dnstwist

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

intelmq

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

pyphishtanklookup

Python API for Phishtank Lookup

otacon

Domain impersonation detector — typosquatting, homoglyph & combosquat detection. One command, ~10s, no paid APIs.

facad1ng

Open-source URL masking & analysis tool for security research, phishing awareness, and defensive testing. Demonstrates adversary techniques used to disguise malicious links.

wifiphisher

The Rogue Access Point Framework

yara-mail

A Python package and command line utility for scanning emails with YARA rules

rithik

Terminal card for Rithik Krishna T, plus an offline checker for Indian scam SMS, WhatsApp messages and links. npx rithik / pipx install rithik. Zero dependencies.

opensquat

openSquat is an open-source tool that detects look-alike domains impersonating your brand, by scanning newly registered domains daily.

spoofy

Spoofy is a program that checks if a list of domains can be spoofed based on SPF and DMARC records.

phishsage

CLI toolkit for email phishing analysis. Parses .eml files, runs heuristic checks on headers, links, and attachments, and outputs structured JSON.

fraudurl

fraudurl: fast, offline phishing URL detector and checker for Python. Check one URL or a whole CSV of links for phishing, with calibrated probabilities and plain-English reasons. One file, zero dependencies, never visits the sites.

certpatrol-orchestrator

Process orchestration platform for managing multiple CertPatrol instances with a modern web interface.

lurescope

Deployable fraud-lure scoring API with a live adversarial-evasion demo — companion to LureBench

phish-signals

Heuristic phishing-detection engine. Python and Node/Typescript Versions

kestrel-sgr

Autonomous Phishing Control System (APCS) — multi-plane security governance runtime that detects, analyzes, predicts, and neutralises social-engineering threats. OPA Rego policies, 26-node DAG, threat-intel integrations, and a live dashboard.

lurebench

A maintained benchmark and evaluation harness for detecting AI-generated fraud lures (phishing, BEC, romance / pig-butchering).

phishing-tracker

Utility to manage sets of phishing links making it easier to track their removal progress over time.

phishing-web-collector

PhishingWebCollector is a Python library that integrates 22 phishing feeds into one solution and offers a platform for collecting and managing malicious website data. Suitable for practical cybersecurity applications, like updating local blacklists, and research, such as building phishing detection datasets.

pytriage

PyTriage is a Python library for interacting with Cofense Triage's v1 and v2 API's.

crawlerbox

CrawlerBox is an automated analysis framework designed for parsing emails and crawling embedded web resources.

certpatrol

A fast, lightweight Certificate Transparency (CT) log tailer for your terminal. Filter domains with regex, run locally for privacy, and monitor in real time — no third-party servers, no tracking. A modern, local, privacy-friendly CertStream alternative.

gitem

A Github organization reconnaissance tool.

pythem

pentest framework