Security Research Python Packages

govengine

Governance kernel for SCLite-backed workflows, validating policy gates, lifecycle boundaries, receipts, and trust decisions without owning execution.

6K 2 0

search-vulns

A modular tool to search for known vulnerabilities, exploits and more across various data sources

6K 92 15

sclite-core

Schema-backed contract layer for governed AI/security workflows: intent, policy decisions, approvals, execution receipts, evidence, and replayable audit traces.

5K 2 1

phantomsignal

Open-source OSINT intelligence framework — nmap-powered port scanning with OS detection, rich CLI panels, DNS recon, tech fingerprinting, 30+ threat intel APIs, Shadow Profiler, and cyberpunk web UI. pip install phantomsignal

3K 1 0

mcp-fuzzer

A generic mcp server fuzzer

3K 37 6

noai-watermark

Remove invisible AI watermarks (SynthID, StableSignature, TreeRing) and strip AI metadata from images. Open-source CLI & Python toolkit.

2K 137 22

ravenclaw-security

Governance-bound Python security research runtime for controlled AI-assisted workflows, with policy gates, execution receipts, evidence traces, and operator-visible state; a precursor to the SCLite/GovEngine/RExecOp architecture.

1K 4 0

q-uestionable-ai

Agentic AI Security Research

1K 0 0

mikrotikapi-bf

RouterOS Attack & Exploitation Framework — 40 CVE/EDB exploits, MAC-Server L2, credential decoder, NPK analyzer, 300-thread BF, Nmap NSE auto-install, pip package, CVE scanner. v3.5.4

970 88 29

rekos

Terminal-native passive OSINT CLI for local-first public-source investigations, evidence correlation, and case management.

917 9 2

o1op

Deterministic code synthesis operator — zero LLM in the loop. 8-color algebraic type system, 7-pass causal inference, 7-layer verification, 9-phase autonomous engagement. Substrate validated across 9 IEEE 2026 papers + IBM z/OS production assessment.

853 0 0

fuzz-introspector

Fuzz Introspector -- introspect, extend and optimise fuzzers

719 461 85

oscura

Python framework for hardware reverse engineering: signal analysis, protocol decoding, and automated dissector generation. Unified workflows from oscilloscope captures to Wireshark dissectors with IEEE-compliant measurements.

656 1 0

ipsw

A Python library for the ipsw daemon API

618 28 4

jaegis-raverse-mcp-server

MCP Server for RAVERSE - AI Multi-Agent Binary Patching System with 35 tools, NPX/NPM/PyPI support, and 20+ client configurations

557 3 1

ransomwatch

ransomwatch is a Python based tool designed for ransomware threat intelligence and security research.

512 4 0

systrack

📡🐧 Linux kernel syscall implementation tracker

451 274 19

cssinj

CSSINJ is a tool that exploits CSS injection vulnerabilities to exfiltrate sensitive information from web applications. This tool is designed for security professionals to assess the security posture of web applications by demonstrating how CSS can be used to extract data covertly.

433 3 0

prompt-database

Prompt injection attack database for defensive AI security research with RAG-powered generation and testing integration

182 2 1

crawlerbox

An analysis pipeline for parsing and crawling evasive phishing emails

176 22 1

owlscan

68 1 0