Ctf Python Packages | PyPI Stats

pwntools

CTF framework and exploit development library

374K 13K 2K

rust-demangler

Python module for demangling rust function names

205K 19 1

barectf

Generator of ANSI C tracers which output CTF data streams

91K 80 17

flask-unsign

Command line tool to fetch, decode, brute-force and craft session cookies of a Flask application by guessing secret keys.

73K 640 47

myjwt

A cli for cracking, testing vulnerabilities on Json Web Token(JWT)

53K 135 19

ciphey

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

46K 21K 1K

flask-unsign-wordlist

The following package is the standalone wordlist-only component to flask-unsign.

13K 43 13

pwn

CTF framework and exploit development library

9K 13K 2K

exegol

Fully featured and community-driven hacking environment

7K 3K 275

adscan

Free Active Directory pentesting tool and Linux CLI for AD enumeration, BloodHound, Kerberoasting, ADCS, DCSync, and attack paths.

7K 267 34

ptai

The most autonomous pentesting AI on the market. MCP server + Python agents with 150+ security tools, exploit chaining, and PoC validation.

5K 159 39

factordb-pycli

FactorDB client library with Python

5K 53 10

vulnclaw

基于 AI Agent + MCP 工具链 + 渗透 Skill 编排，配合大语言模型，自然语言输入 → 自动完成「信息收集 → 漏洞发现 → 漏洞利用 → 报告生成」全流程。

5K 30 9

exploitfarm

ExploitFarm is an attacker and flag submitter for A/D CTF

5K 42 7

fenjing

专为CTF设计的Jinja2 SSTI全自动绕WAF脚本 | A Jinja2 SSTI cracker for bypassing WAF, designed for CTF

4K 1K 75

stego-lsb

Least Significant Bit Steganography for bitmap images (.bmp and .png), WAV sound files, and byte sequences. Simple LSB Steganalysis (LSB extraction) for bitmap images.

3K 649 102

xfarm

Exploit Farm client

3K 42 7

codext

Python codecs extension featuring CLI tools for encoding/decoding anything

3K 298 25

stegcracker

Steganography brute-force utility to uncover hidden data inside files

3K 594 108

reconninja

⚡ ReconNinja v8.2.1 — 38-phase recon framework for pentesters & bug bounty hunters. Subdomain enum → port scan → web recon → WAF/CORS/JS/cloud bucket detection → GitHub OSINT → CVE lookup → AI threat analysis → HTML report. Domains, IPs, CIDRs, target lists. Plugin system. 598 tests.

3K 39 6