Phishing Python Packages

dnstwist

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

65K 6K 845

intelmq

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

3K 1K 313

facad1ng

Open-source URL masking & analysis tool for security research, phishing awareness, and defensive testing. Demonstrates adversary techniques used to disguise malicious links.

2K 486 69

yara-mail

A Python package and command line utility for scanning emails with YARA rules

1K 22 5

pyphishtanklookup

Python API for Phishtank Lookup

1K 4 2

opensquat

The openSquat is an open-source tool for detecting domain look-alikes by searching for newly registered domains that might be impersonating legit domains and brands.

897 954 161

phishsage

PhishSage is a lightweight email triage and phishing-analysis toolkit. Extracts headers, attachments, and links, applies heuristic checks, and produces structured insights.

491 2 0

gitem

A Github organization reconnaissance tool.

326 219 38

wifiphisher

The Rogue Access Point Framework

260 15K 3K

phishing-tracker

Utility to manage sets of phishing links making it easier to track their removal progress over time.

237 4 1

certpatrol-orchestrator

Process orchestration platform for managing multiple CertPatrol instances with a modern web interface.

233 2 1

pytriage

PyTriage is a Python library for interacting with Cofense Triage's v1 and v2 API's.

218 1 1

pythem

pentest framework

197 1K 320

urlscanner

Lightweight Python CLI utility which makes use URLScan.io APIs to automate scanning and retrieving information about URLs

167 1 2

phishing-web-collector

PhishingWebCollector is a Python library that integrates 22 phishing feeds into one solution and offers a platform for collecting and managing malicious website data. Suitable for practical cybersecurity applications, like updating local blacklists, and research, such as building phishing detection datasets.

146 5 3

crawlerbox

CrawlerBox is an automated analysis framework designed for parsing emails and crawling embedded web resources.

144 20 1

certpatrol

A fast, lightweight Certificate Transparency (CT) log tailer for your terminal. Filter domains with regex, run locally for privacy, and monitor in real time — no third-party servers, no tracking. A modern, local, privacy-friendly CertStream alternative.

120 5 0

csirtg-domainsml

Predict Phishing Domains with SKLearn and Python

110 3 3

espoofer

An email spoofing testing tool that aims to bypass SPF/DKIM/DMARC and forge DKIM signatures.🍻

109 2K 280

followlink

FollowLink is a Python-based command-line tool that allows you to follow and analyze URL redirects. It tracks the history of HTTP redirects, color-codes the HTTP status codes for easy identification, and calculates the total response time. This tool is useful for inspecting shortened URLs or URLs with multiple redirects.

96 4 1