Ethical Hacking Python Packages

mockssh

Mock an SSH server and define all commands it supports (Python, Twisted)

nebula-ai

AI-powered penetration testing assistant for automating recon, note-taking, and vulnerability analysis.

pyadrecon-adws

An implementation of PyADRecon using ADWS instead of LDAP. Generates individual CSV files and a single XSLX + HTML report about your AD domain. Evades EDR detections through ADWS.

reconninja

⚡ ReconNinja v8.2.1 — 38-phase recon framework for pentesters & bug bounty hunters. Subdomain enum → port scan → web recon → WAF/CORS/JS/cloud bucket detection → GitHub OSINT → CVE lookup → AI threat analysis → HTML report. Domains, IPs, CIDRs, target lists. Plugin system. 598 tests.

numasec

AI agent for penetration testing. Like Claude Code, but for security. Open source, MCP-native, works with any LLM.

pyadrecon

Python3 implementation of ADRecon with support for NTLM and Kerberos authentication querying LDAP. Generates individual CSV files and a single XSLX + HTML report about your AD domain.

apknife

APKnife is an advanced APK analysis and modification tool designed for security researchers and ethical hackers. It allows users to extract, analyze, modify, and sign APK files. The tool provides features like APK extraction, AndroidManifest.xml editing, API call detection, vulnerability scanning, and APK signing

babysploit

:baby: BabySploit Beginner Pentesting Toolkit/Framework Written in Python :snake:

whitehat

Python Packages For Ethical Hacking

happy-frog

HID emulation framework for cybersecurity learning. Generate HID in simple to create .txt without the need for proprietary controllers, no binary needed.

zen-ai-pentest

🛡⚔️AI-Powered Penetration Testing Framework with automated vulnerability scanning, multi-agent system, and compliance reporting🛡⚔️

bot-safe-agents

A library for fetching a list of bot-safe user agents.

brs-xss

Context-aware async XSS scanner powered by BRS-KB

neutron-ai

AI Powered Ethical Hacking Assistant

forbidden

Bypass 4xx HTTP response status codes and more. The tool is based on Python Requests, PycURL, and HTTP Client.

brutekrag

Penetration tests on SSH servers using brute force or dictionary attacks. Written in Python.

credwolf

Credential validation tool for Active Directory Domain Services.

ghostpath

👻 GhostPath — A powerful modular reconnaissance toolkit built for hackers, OSINT professionals & bug bounty hunters — passive + active recon in a sleek CLI shell. Discover subdomains, probe paths, mine archives and hunt certificates — all from one interactive terminal interface.

google-chad

Search Google Dorks like Chad. / Broken link hijacking tool.

crlfsuite

The most powerful CRLF injection (HTTP Response Splitting) scanner.

net-sniffer

A Network Packet Sniffing tool developed in Python 3

property-lister

Extract and convert property list files from SQLite database files and from other property list files.

cloudvault4

AWS S3 bucket scanner | Find exposed S3 buckets, Azure Blob & Google Cloud Storage | Cloud security scanner tool | Bucket enumeration & vulnerability detection

file-scraper

Scrape files for sensitive information, and generate an interactive HTML report. Based on Rabin2.