Phishing Python Packages

dnstwist

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

66K 6K 845

intelmq

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

3K 1K 313

facad1ng

Open-source URL masking & analysis tool for security research, phishing awareness, and defensive testing. Demonstrates adversary techniques used to disguise malicious links.

1K 486 69

yara-mail

A Python package and command line utility for scanning emails with YARA rules

1K 22 5

pyphishtanklookup

Python API for Phishtank Lookup

1K 4 2

opensquat

The openSquat is an open-source tool for detecting domain look-alikes by searching for newly registered domains that might be impersonating legit domains and brands.

925 954 161

phishsage

PhishSage is a lightweight email triage and phishing-analysis toolkit. Extracts headers, attachments, and links, applies heuristic checks, and produces structured insights.

456 2 0

gitem

A Github organization reconnaissance tool.

328 219 38

certpatrol-orchestrator

Process orchestration platform for managing multiple CertPatrol instances with a modern web interface.

321 2 1

wifiphisher

The Rogue Access Point Framework

251 15K 3K

phishing-tracker

Utility to manage sets of phishing links making it easier to track their removal progress over time.

238 4 1

pytriage

PyTriage is a Python library for interacting with Cofense Triage's v1 and v2 API's.

223 1 1

pythem

pentest framework

215 1K 320

urlscanner

Lightweight Python CLI utility which makes use URLScan.io APIs to automate scanning and retrieving information about URLs

168 1 2

phishing-web-collector

PhishingWebCollector is a Python library that integrates 22 phishing feeds into one solution and offers a platform for collecting and managing malicious website data. Suitable for practical cybersecurity applications, like updating local blacklists, and research, such as building phishing detection datasets.

151 5 3

crawlerbox

CrawlerBox is an automated analysis framework designed for parsing emails and crawling embedded web resources.

150 20 1

certpatrol

A fast, lightweight Certificate Transparency (CT) log tailer for your terminal. Filter domains with regex, run locally for privacy, and monitor in real time — no third-party servers, no tracking. A modern, local, privacy-friendly CertStream alternative.

130 5 0

csirtg-domainsml

Predict Phishing Domains with SKLearn and Python

119 3 3

followlink

FollowLink is a Python-based command-line tool that allows you to follow and analyze URL redirects. It tracks the history of HTTP redirects, color-codes the HTTP status codes for easy identification, and calculates the total response time. This tool is useful for inspecting shortened URLs or URLs with multiple redirects.

102 4 1