Red Team Python Packages

mockssh

Mock an SSH server and define all commands it supports (Python, Twisted)

adversarial-robustness-toolbox

Adversarial Robustness Toolbox (ART) - Python Library for Machine Learning Security - Evasion, Poisoning, Extraction, Inference - Red and Blue Teams

kcwarden

Automatically audit your Keycloak configuration for security issues

agent-security-harness

AI agent security harness, adversarial testing: 640 executable tests in the v4.26.1 release, across MCP, A2A, x402/L402, decision governance, benchmark integrity, human-in-the-loop, skill supply chain. Four target shapes: a verdict must be able to be wrong AND to be right. OWASP Agentic v1.1 T1-T17, AIUC-1 19/20 (2026-Q1/Q2 set), NIST AI 800-2.

stoneburner-atomics

Local-first LLM eval: cost, quality, and security suites. Install stoneburner-atomics; CLI is atomics.

adscan

Free Active Directory pentesting tool for Linux, macOS and Windows. Automates AD and LDAP enumeration, Kerberoasting, ASREPRoast, password spraying, ADCS/ESC1, DCSync, RBCD, gMSA, shadow credentials, NTLM relay and credential dumping across 104 techniques, mapping BloodHound-compatible attack paths to Domain Admin. NIS2 / ISO 27001 reports.

provael

Provael — red-team open Vision-Language-Action (VLA) robot policies in simulation and report an Attack Success Rate (ASR). Prove it. Prevail.

phantom-agent

Autonomous Offensive Security Intelligence AI-powered multi-agent penetration testing

aptl-labs

Single-user OpenRÆ backend for creating sandboxes, cyber ranges, digital twins, and other environments.

suijin

Suijin is an open-source fully autonomous red teaming / web app pentesting framework for AI models. Powered by LangGraph, designed for bug bounty hunters and CTF players.

deluluscan

AI-augmented, evidence-first security auditor for authorized testing — web, API, LLM/AI, container, cloud & source code. Pluggable AI (Claude/OpenAI/DeepSeek/Ollama), agentic exploitation, deep verification, multi-format reports. AGPL-3.0.

ptai

Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.

spaf

🎯 AI-orchestrated offensive security framework. Automated recon, CVE mapping, exploit POC generation & remediation across a discovery → validation → report pipeline. CLI · API · MCP · dashboard. Powered by Gemini, Claude, Ollama & LM Studio. Authorized testing only.

vamp-llm-probe

LLM security auditor — prompt injection, jailbreak, ASCII smuggling detection, bilingual EN+ES red team (900+ adversarial prompts, OWASP Agentic Top 10)

vamp-penreport

Professional Pentest Report Aggregator — VampSecure Labs

agentseal

Security toolkit for AI agents. Scan your machine for dangerous skills and MCP configs, monitor for supply chain attacks, test prompt injection resistance, and audit live MCP servers for tool poisoning.

jevg

Static code scanner (SAST linter) that finds insecure usage of Jev / TypeSafe guardrails in Python. Not a guardrail itself — build-time analysis, offline, no API key.

hickok

Reverse-shell handler & post-exploitation: multi-listener PTY console, payload generation, and a full SQL injection engine (union/boolean/time, native Tor). Python, no core deps.

office-password-toolkit

Detect, extract, bypass, and decrypt passwords and protection in Microsoft Office and OpenDocument files

ruoyi-scan

RuoYi (若依) dedicated vulnerability scanner: plugin architecture, three-state verdict, WAF bypass, exploit chains, AI POC generation, nuclei compatible. 若依专项漏洞扫描器

rcekit

Test a URL or captured HTTP request for RCE—and know what the evidence actually proves. RCEKit checks command injection, SSTI and blind paths, separates confirmed execution from uncertain signals and untested runs, and generates targeted payloads for Burp, ffuf and Nuclei. One Python file; no third-party dependencies.

fibratus

Security sensor for realtime threat detection and protection

slack-watchman

Slack enumeration and exposed secrets detection tool

ghostbt

The open-source wireless research platform for ESP32.