Vulnerability Assessment Python Packages

garak

the LLM vulnerability scanner

gvm-tools

Remote control your Greenbone Community Edition or Greenbone Enterprise Appliance

nuguard

AI red-teaming tool and LLM security framework to evaluate agentic AI applications. Tests prompt injections, handles vulnerability assessment, SBOM generation, and static analysis.

search-vulns

A modular tool to search for known vulnerabilities, exploits and more across various data sources

codeaudit

Codeaudit - Modern Python source code security analyzer based on distrust.

nebula-ai

AI-powered penetration testing assistant for automating recon, note-taking, and vulnerability analysis.

vulnparse-pin

A Vulnerability Intelligence and Decision Support Engine — Making Vulnerability Triage Faster and Remediation Decisions Explainable

ai-safety-tester

LLM Security Testing Framework | CVE-style severity scoring, prompt injection detection, bias analysis | Strict mypy typing | Fast CI/CD with pytest markers | PyPI: ai-safety-tester

websecprobe

Security testing tool for analyzing HTTP 403 responses and identifying access control misconfigurations in web applications.

1200km-auditai

AI-assisted Linux host security auditing with structured findings, remediation guidance, Debian packaging, and PyPI distribution.

tp-vulnbox

VulnBox is a container that is intentionally designed with vulnerabilities to allow security professionals to practice and improve their offensive security skills, such as penetration testing and vulnerability assessment

raccoon-scanner

A high performance offensive security tool for reconnaissance and vulnerability scanning

nexus-sec

Nexus — offline, evidence-gated red+blue security agent. Every finding is proven by the target's own response; no hallucinated vulns. pip install nexus-sec

cssinj

CSSINJ is a tool that exploits CSS injection vulnerabilities to exfiltrate sensitive information from web applications. This tool is designed for security professionals to assess the security posture of web applications by demonstrating how CSS can be used to extract data covertly.

keyreach

Paste a leaked API key and get a full capability map, computed severity, and a disclosure-ready security report — deterministic, read-only, zero AI/LLM.

pnu-vuxml

FreeBSD VuXML library and query tool

vulnx

vulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can perform a quick CMS security detection, information collection (including sub-domain name, ip address, country information, organizational information and time zone, etc.) and vulnerability scanning.

nvidia-eval-factory-garak

the LLM vulnerability scanner

nexus-rec

Nexus-REC — Intelligent Reconnaissance & Vulnerability Assessment Framework

cvrf2csaf

A CVRF CSAF Converter, taking care about OASIS specification.

avmp

A collection of tools for managing and automating vulnerability management.

nuclipy

A simple template based vulnerability scanner in python (Inspired by ProjectDiscovery's Nuclei)

port-agent

An AI agent that diagnoses vulnerabilities in network ports.

vuxml

FreeBSD VuXML library and query tool