Web Security Python Packages

secure

Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).

cors

🎯 Fast CORS misconfiguration vulnerabilities scanner

requests-ip-rotator

A Python library to utilize AWS API Gateway's large IP pool as a proxy to generate pseudo-infinite IPs for web scraping and brute forcing.

arcis

Inside-the-app security middleware for Node.js, Python, and Go. 20+ attack vectors. One install, three languages, MIT.

backpropagate

Headless LLM fine-tuning in 3 lines — smart defaults, VRAM-aware batch sizing, multi-run SLAO, GGUF export for Ollama.

mobsf

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

corscanner

🎯 Fast CORS misconfiguration vulnerabilities scanner

githacker

🕷️ A `.git` folder exploiting tool that is able to restore the entire Git repository, including stash, common branches and common tags.

crabguard

Enterprise web security scanner — Burp Suite + OWASP ZAP alternative. pip install crabguard

numasec

The AI Agent for Cyber Security.

secautoban

SecAutoBan SDK

brs-xss

MIT license BRS-XSS is a modular Python CLI scanner for XSS vulnerabilities. Features context-aware payloads, WAF evasion, DOM analysis via Playwright, ML-based risk scoring, and export in HTML/JSON/SARIF. Designed for integration with Brabus Recon Suite (BRS).

presidio-hardened-flask

Presidio security-hardened enhancements and defaults for Flask applications

cssinj

A python tool to exploit CSS injection vulnerabilities to exfiltrate sensitive information from web applications.

githack

A pure python implemented .git/ folder disclosure exploit

surface-audit

Deterministic security smoke tests for preview, staging, and pre-deploy web URLs.

ubag

Open reference implementation: agent identity + routing at the web edge (Ed25519 + ES256/JWKS). Python & Node.

padding-oracle

Fast threaded padding oracle attack automation script for Python 3.

gitsnatcher

Professional .git repository reconstructor and extractor

pyhtools

Python Hacking Tools (PyHTools) (pht) is a collection of python written hacking tools consisting of network scanner, arp spoofer and detector, dns spoofer, code injector, packet sniffer, network jammer, email sender, downloader, wireless password harvester credential harvester, keylogger, download&execute, and reverse_backdoor along with website login bruteforce, scraper, web spider etc. PHT also includes malwares which are undetectable by the antiviruses.

brs-kb

BRS-KB is XSS Knowledge Base API

django-gradual-throttle

🕒 A Django middleware for graceful request throttling with configurable delay strategies (linear, exponential, or custom). Unlike traditional rate limiting that blocks excessive traffic, this package introduces progressive delays to throttle requests smartly and smoothly.

driftmux

Black-box service discovery, classification, and adaptive scan routing

overreacher

A CORS Misconfiguration scanning tool