Security Tools Python Packages

bandit

Bandit is a tool designed to find common security issues in Python code.

scapy

Scapy: the Python-based interactive packet manipulation program & library.

zizmor

Static analysis for GitHub Actions

flake8-bandit

Automated security testing using bandit and flake8.

pygitguardian

Python API client library for the GitGuardian API

prowler

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

llm-guard

The Security Toolkit for LLM Interactions

oschmod

chmod for Windows, macOS and Linux

njsscan

njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.

trufflehog

Find, verify, and analyze leaked credentials

pysentry-rs

🐍 Scan your Python dependencies for known security vulnerabilities with Rust-powered scanner

flask-unsign

Command line tool to fetch, decode, brute-force and craft session cookies of a Flask application by guessing secret keys.

keepercommander

Keeper Commander is a python-based CLI and SDK interface to the Keeper Security platform. Provides administrative controls, reporting, import/export and vault management.

certora-cli

The Certora Prover is the state-of-the-art security tool for automated formal verification of smart contracts running on EVM-based chains, Solana and Stellar

certora-cli-alpha-master

The Certora Prover is the state-of-the-art security tool for automated formal verification of smart contracts running on EVM-based chains, Solana and Stellar

myjwt

A cli for cracking, testing vulnerabilities on Json Web Token(JWT)

pyonenote

A python library to parse OneNote (.one) files

cve-bin-tool

The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.

anyrun-sdk

Simplify integration with ANY.RUN REST API services

whispers

Identify hardcoded secrets in static structured text (version 2)

compose-lint

Security-focused linter for Docker Compose files. Catches dangerous misconfigurations before they reach production. Grounded in OWASP and CIS Docker Benchmark.

ostorlab

OXO is a security scanning orchestrator for the modern age.

hickok

Reverse-shell handler & post-exploitation: multi-listener PTY console, payload generation, and a full SQL injection engine (union/boolean/time, native Tor). Python, no core deps.

flask-unsign-wordlist

The following package is the standalone wordlist-only component to flask-unsign.