SaaSHub helps you find the best software and product alternatives Learn more →
Top 23 Python Cybersecurity Projects
-
Project mention: Sherlock: Hunt down social media accounts by username across 400 social networks | news.ycombinator.com | 2024-12-25
the only data needed are the urls from https://github.com/sherlock-project/sherlock/blob/master/she...
[1] https://www.reddit.com/r/github/comments/1at9br4/i_am_new_to...
-
InfluxDB
InfluxDB – Built for High-Performance Time Series Workloads. InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.
-
SWE-agent
SWE-agent takes a GitHub issue and tries to automatically fix it, using your LM of choice. It can also be employed for offensive cybersecurity or competitive coding challenges. [NeurIPS 2024]
Project mention: Boost Your Coding Agent and Understand Its Reasoning with 3 Simple Prompts | dev.to | 2025-06-20SWE-Agent
-
Project mention: SpiderFoot automates OSINT for threat intelligence | news.ycombinator.com | 2024-07-03
Some would disagree with that statement: <https://github.com/smicallef/spiderfoot/issues>
The little development on the project is probably due to it's age. -
Project mention: Show HN: BunkerWeb – The Open-Source Web Application Firewall (WAF) | news.ycombinator.com | 2024-12-06
-
pyWhat
🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙♀️
Project mention: pyWhat VS binwalk - a user suggested alternative | libhunt.com/r/pyWhat | 2024-07-19 -
-
DefaultCreds-cheat-sheet
One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
-
-
-
PhoneSploit-Pro
An all-in-one hacking tool to remotely exploit Android devices using ADB and Metasploit-Framework to get a Meterpreter session.
-
-
Villain
Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).
-
blackbird
An OSINT tool to search for accounts by username and email in social networks. (by p1ngul1n0)
-
malwoverview
Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, InQuest, VxExchange and IPInfo, and it is also able to scan Android devices against VT.
-
ciso-assistant-community
CISO Assistant is a one-stop-shop for GRC, covering Risk, AppSec, Compliance/Audit Management, Privacy and supporting +90 frameworks worldwide with auto-mapping: NIST CSF, ISO 27001, SOC2, CIS, PCI DSS, NIS2, CMMC, PSPF, GDPR, HIPAA, Essential Eight, NYDFS-500, DORA, NIST AI RMF, 800-53, CyFun, AirCyber, NCSC, ECC, SCF and so much mor
Project mention: Revolutionizing Cybersecurity: CISO Assistant - The One-Stop Shop for Security Management | dev.to | 2025-05-03View the Project on GitHub
-
tracecat
Open source Tines / Splunk SOAR alternative. All-in-one automation platform (workflows, tables, cases) for security and IT teams.
-
-
Keylogger
Get Keyboard,Mouse,ScreenShot,Microphone Inputs from Target Computer and Send to your Mail. (by aydinnyunus)
-
-
reconspider
🔎 Most Advanced Open Source Intelligence (OSINT) Framework for scanning IP Address, Emails, Websites, Organizations.
-
blackhat-python3
Source code for the book "Black Hat Python" by Justin Seitz. The code has been fully converted to Python 3, reformatted to comply with PEP8 standards and refactored to eliminate dependency issues involving the implementation of deprecated libraries.
-
Malcolm
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
-
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
NOTE:
The open source projects on this list are ordered by number of github stars.
The number of mentions indicates repo mentiontions in the last 12 Months or
since we started tracking (Dec 2020).
Python Cybersecurity discussion
Python Cybersecurity related posts
-
Show HN: Viper Vulnerability Intelligence, Prioritization,Exploitation Reporter
-
A Guide to the MITRE ATT&CK Framework: Understanding Tactics & Techniques
-
Threat Detection for AWS CloudTrail Logs
-
Cradle – Collaborative Threat Intelligence Hub
-
Pyramid Of Pain
-
Slack-Guardian VS slack-watchman - a user suggested alternative
2 projects | 14 Dec 2024 -
🔐 Threat Intelligence Data Integration Framework: Potenciando el Análisis de Amenazas basados en Grafos 📊🕵️♀️
-
A note from our sponsor - SaaSHub
www.saashub.com | 23 Jun 2025
Index
What are some of the best open-source Cybersecurity projects in Python? This list will help you:
| # | Project | Stars |
|---|---|---|
| 1 | sherlock | 66,159 |
| 2 | SWE-agent | 16,337 |
| 3 | spiderfoot | 14,637 |
| 4 | BunkerWeb | 8,203 |
| 5 | pyWhat | 6,866 |
| 6 | caldera | 6,204 |
| 7 | DefaultCreds-cheat-sheet | 6,117 |
| 8 | faraday | 5,484 |
| 9 | Azure-Sentinel | 5,120 |
| 10 | PhoneSploit-Pro | 5,076 |
| 11 | IntelOwl | 4,158 |
| 12 | Villain | 4,137 |
| 13 | blackbird | 3,556 |
| 14 | malwoverview | 3,265 |
| 15 | ciso-assistant-community | 2,979 |
| 16 | tracecat | 2,820 |
| 17 | APT_REPORT | 2,583 |
| 18 | Keylogger | 2,357 |
| 19 | nexfil | 2,324 |
| 20 | reconspider | 2,304 |
| 21 | blackhat-python3 | 2,173 |
| 22 | Malcolm | 2,140 |
| 23 | opencve | 2,035 |
Sponsored
InfluxDB – Built for High-Performance Time Series Workloads
InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.
www.influxdata.com