Network Security Python Packages

scapy

Scapy: the Python-based interactive packet manipulation program & library.

pydivert

A Python binding for WinDivert driver

pypcapkit

Python-based Comprehensive Network Packet Analysis Library

nfstream

NFStream: a Flexible Network Data Analysis Framework.

tethered

tethered — Runtime network egress control for Python. One function call to restrict which hosts your code can connect to.

communityid

A Python implementation of the Community ID flow hashing standard

firewallfabrik

Modern fwbuilder successor: Qt GUI for managing iptables/nftables policies. Centralized policy DB with reusable objects, scales to hundreds of firewalls, generates deployment-ready shell scripts.

pan-scm-sdk

Python SDK for Palo Alto Networks Strata Cloud Manager.

ftagent

Flowtriq DDoS Detection Agent. Real-time traffic monitoring, incident detection, PCAP capture, and auto-mitigation

wireshark-mcp

A production-grade Model Context Protocol (MCP) server for Wireshark

cyberscanai

AI Agent Tool for Penetration Testing and Network Forensics

anubis-netsec

Subdomain enumeration tool

suricata-check

suricata-check is a command line utility to provide feedback on Suricata rules. The tool can detect various issues including those covering syntax validity, interpretability, rule specificity, rule coverage, and efficiency.

macspoofer

A command-line tool to spoof your network interface's MAC address on Linux systems.

domainclassifier

DomainClassifier is a Python (2/3) library to extract and classify Internet domains/hostnames/IP addresses from raw unstructured text files following their DNS existence, localization or attributes.

pyp0f

p0f v3 with impersonation spoofing, written in Python - Accurately guess the OS of a packet with passive fingerprinting.

whatweb

Next generation web scanner

jspcap

Python-based Comprehensive Network Packet Analysis Library

network-pipeline

Network traffic data pipeline for real-time predictions and building datasets for deep neural networks

mikrotikapi-bf

RouterOS Attack & Exploitation Framework — 100 CVE/EDB exploits, 8-phase audit, credential brute-force, SARIF export

cyberscan

CyberScan: Network's Forensics ToolKit

nettacker

Automates information gathering, vulnerability scanning and aids penetration testing engagements in general

ivre

Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.

what-vpn

Identify servers running various SSL VPNs based on protocol-specific behaviors