Ctf Python Packages

pwntools

CTF framework and exploit development library

rust-demangler

Python module for demangling rust function names

barectf

Generator of ANSI C tracers which output CTF data streams

flask-unsign

Command line tool to fetch, decode, brute-force and craft session cookies of a Flask application by guessing secret keys.

myjwt

A cli for cracking, testing vulnerabilities on Json Web Token(JWT)

ciphey

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

flask-unsign-wordlist

The following package is the standalone wordlist-only component to flask-unsign.

pwn

CTF framework and exploit development library

exegol

Fully featured and community-driven hacking environment

adscan

Free Active Directory pentesting tool and Linux CLI for AD enumeration, BloodHound, Kerberoasting, ADCS, DCSync, and attack paths.

ptai

The most autonomous pentesting AI on the market. MCP server + Python agents with 150+ security tools, exploit chaining, and PoC validation.

factordb-pycli

FactorDB client library with Python

vulnclaw

基于 AI Agent + MCP 工具链 + 渗透 Skill 编排， 配合大语言模型， 自然语言输入 → 自动完成「信息收集 → 漏洞发现 → 漏洞利用 → 报告生成」全流程。

exploitfarm

ExploitFarm is an attacker and flag submitter for A/D CTF

fenjing

专为CTF设计的Jinja2 SSTI全自动绕WAF脚本 | A Jinja2 SSTI cracker for bypassing WAF, designed for CTF

stego-lsb

Least Significant Bit Steganography for bitmap images (.bmp and .png), WAV sound files, and byte sequences. Simple LSB Steganalysis (LSB extraction) for bitmap images.

xfarm

Exploit Farm client

codext

Python codecs extension featuring CLI tools for encoding/decoding anything

stegcracker

Steganography brute-force utility to uncover hidden data inside files

reconninja

⚡ ReconNinja v8.2.1 — 38-phase recon framework for pentesters & bug bounty hunters. Subdomain enum → port scan → web recon → WAF/CORS/JS/cloud bucket detection → GitHub OSINT → CVE lookup → AI threat analysis → HTML report. Domains, IPs, CIDRs, target lists. Plugin system. 598 tests.

wall-ctf

wall-ctf (CATI) - Conduction Transfer Function coefficients for multilayer walls (Z-transform / Mitalas-Stephenson method)

vagd

VirtuAlization GDb integrations in pwntools

fgex

Firegex client

fas-judgement

Open-source prompt injection attack console - Test AI systems for prompt injection vulnerabilities