Security Research Python Packages

search-vulns

A modular tool to search for known vulnerabilities, exploits and more across various data sources

noai-watermark

Remove invisible AI watermarks (SynthID, StableSignature, TreeRing) and strip AI metadata from images. Open-source CLI & Python toolkit.

suijin

Suijin is an open-source fully autonomous red teaming / web app pentesting framework for AI models. Powered by LangGraph, designed for bug bounty hunters and CTF players.

honeypot-auditor

Does This Look Like An Honeypot? (DTLLAH) Multi-protocol CLI that fingerprints whether a target IP behaves like an honeypot — using Honeyscore, active auth/state probes, and a weighted score.

mcp-fuzzer

A generic mcp server fuzzer

ghostbt

The open-source wireless research platform for ESP32.

govengine

Governance kernel for SCLite-backed workflows, validating policy gates, lifecycle boundaries, receipts, and trust decisions without owning execution.

dumpdork

Search-driven OSINT and reconnaissance toolkit for web and GitHub discovery.

pocmap

MCP-native CVE, PoC & exploit discovery toolkit (Metasploit, Nuclei, GitHub & more)

fuzz-introspector

Fuzz Introspector -- introspect, extend and optimise fuzzers

chainbreak

Cloud authorization benchmark for AWS IAM/STS: permission drift, revocation and stale authority, with Terraform infrastructure and reproducible evidence.

fileaudit

Simplify building secure Python applications by default. Validate files before you use them.

systrack

📡🐧 Linux kernel syscall implementation tracker

printerxpl-forge

Complete printer penetration testing toolkit with 109 commands across PJL, PostScript & PCL. 4 network protocols, automated discovery, file exfiltration, NVRAM access, attack payloads. Modern Python 3.8+ offensive security tool.

sclite-core

Schema-backed contract layer for governed AI/security workflows: intent, policy decisions, approvals, execution receipts, evidence, and replayable audit traces.

ransomwatch

ransomwatch is a Python based tool designed for ransomware threat intelligence and security research.

jaegis-raverse-mcp-server

RAVERSE: AI Multi-Agent Binary Patching System with MCP Server (35 tools, npm/pip/docker)

ipsw

A Python library for the ipsw daemon API

phantomsignal

The OPSEC-native OSINT framework: a stealth egress layer (proxy pool, adaptive pacing, JA3/JA4) under every module + an honest per-scan report of what you leaked. DNS/port/tech recon, nuclei vuln scanning, 54+ intel sources (many keyless), identity Profiler, best-of-breed engine orchestration. Web · CLI · REST. pip install phantomsignal

ravenclaw-security

Governance-bound Python security research runtime for controlled AI-assisted workflows, with policy gates, execution receipts, evidence traces, and operator-visible state; a precursor to the SCLite/GovEngine/RExecOp architecture.

mikrotikapi-bf

DEPRECATED — absorbed into EmbedXPL v5.0.0. See https://github.com/mrhenrike/EmbedXPL-Forge

cssinj

CSSINJ is a tool that exploits CSS injection vulnerabilities to exfiltrate sensitive information from web applications. This tool is designed for security professionals to assess the security posture of web applications by demonstrating how CSS can be used to extract data covertly.

rekos

Terminal-native passive OSINT CLI for local-first public-source investigations, evidence correlation, and case management.

keyreach

Paste a leaked API key and get a full capability map, computed severity, and a disclosure-ready security report — deterministic, read-only, zero AI/LLM.