Security Tools Python Packages

bandit

Bandit is a tool designed to find common security issues in Python code.

scapy

Scapy: the Python-based interactive packet manipulation program & library.

zizmor

Static analysis for GitHub Actions

pygitguardian

Python API client library for the GitGuardian API

flake8-bandit

Automated security testing using bandit and flake8.

llm-guard

The Security Toolkit for LLM Interactions

prowler

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

oschmod

chmod for Windows, macOS and Linux

trufflehog

Find, verify, and analyze leaked credentials

njsscan

njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.

ostorlab

OXO is a security scanning orchestrator for the modern age.

pysentry-rs

🐍 Scan your Python dependencies for known security vulnerabilities with Rust-powered scanner

keepercommander

Keeper Commander is a python-based CLI and SDK interface to the Keeper Security platform. Provides administrative controls, reporting, import/export and vault management.

certora-cli

The Certora Prover is the state-of-the-art security tool for automated formal verification of smart contracts running on EVM-based chains, Solana and Stellar

flask-unsign

Command line tool to fetch, decode, brute-force and craft session cookies of a Flask application by guessing secret keys.

myjwt

A cli for cracking, testing vulnerabilities on Json Web Token(JWT)

nessus-file-reader

CLI tool and python module which enables you to parse nessus scan files from Nessus and Tenable.SC by (C) Tenable, Inc.

certora-cli-alpha-master

The Certora Prover is the state-of-the-art security tool for automated formal verification of smart contracts running on EVM-based chains, Solana and Stellar

pyonenote

A python library to parse OneNote (.one) files

stix-shifter-modules-synchronous-template

This project consists of an open source library allowing software to connect to data repositories using STIX Patterning, and return results as STIX Observations.

anyrun-sdk

Simplify integration with ANY.RUN REST API services

cve-bin-tool

The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.

whispers

Identify hardcoded secrets in static structured text (version 2)

stix-shifter

This project consists of an open source library allowing software to connect to data repositories using STIX Patterning, and return results as STIX Observations.