Scanner Python Packages

ostorlab

OXO is a security scanning orchestrator for the modern age.

hol-guard

AI antivirus for developer agents: protect Codex, Claude Code, Cursor, Gemini, OpenCode, plugins, skills, MCP servers, and AI harnesses before tools run.

plugin-scanner

AI antivirus for developer agents: protect Codex, Claude Code, Cursor, Gemini, OpenCode, plugins, skills, MCP servers, and AI harnesses before tools run.

bbot

The recursive internet scanner for hackers. 🧡

dnstwist

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

dirsearch

Web path scanner

javac-parser

Exposes OpenJDK's Java parser and scanner to Python

agent-audit-kit

Static scanner for MCP-connected AI agent pipelines — 200 rules across 11 categories, 12 compliance frameworks, OWASP Agentic 10/10 + MCP 10/10, GitHub Action, SARIF, 48h CVE-to-rule SLA.

credsweeper

CredSweeper is a tool to detect credentials in any directories or files. CredSweeper could help users to detect unwanted exposure of credentials (such as token, passwords, api keys etc.) in advance. By scanning lines, filtering, and using AI model as option, CredSweeper reports lines with possible credentials, where the line is, and expected type o

codex-plugin-scanner

Moved to hashgraph-online/hol-guard

medusa-security

AI-first security scanner with 76 analyzers, 9,600+ detection rules, and repo poisoning detection for AI/ML, LLM agents, and MCP servers. Scan any GitHub repo with: medusa scan --git user/repo

hardax

HARDAX - Hardening Audit eXaminer

httpz-scanner

Hyper-fast HTTP Scraping Tool

n0s1

Secret Scanner for Slack, Jira, Confluence, Asana, Wrike, Linear, Zendesk, GitHub, and GitLab

znetscan

🔍 ZNetScan - Scanner de Rede Inteligente com detecção de MAC randomizado e fingerprint

ansede-static

Ansede Static: Next-Gen SAST Engine — Fast, Offline, Security for Modern Codebases Detect critical security vulnerabilities and code quality issues in Python, JavaScript, and TypeScript projects with a single command. No dependencies, no cloud, no setup—just download, unzip, and scan any folder instantly.

fenjing

专为CTF设计的Jinja2 SSTI全自动绕WAF脚本 | A Jinja2 SSTI cracker for bypassing WAF, designed for CTF

ts-deepscan

Repository scanner for the identification of effective licenses and copyright information.

webcap

An ultra lightweight web screenshot tool with advanced DOM analysis features.

yokkaichi

Shodan-like server scanner for Minecraft (formely mcserverscanner)

jmo-security

JMo Security Suite - Terminal-first security audit toolkit with many tools, multi-target scanning, & compliance

pyrepscan

A Git Repository Secrets Scanner written in Rust

autopwn-suite

AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.

whatweb

Next generation web scanner