Python Hacking

Open-source Python projects categorized as Hacking
Edit details
Topics: Python Pentesting hacking-tool Python3 Penetration Testing
The modern identity platform for B2B SaaS
The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.
workos.com
Sponsored

Top 23 Python Hacking Projects

  • PayloadsAllTheThings

    A list of useful payloads and bypass for Web Application Security and Pentest/CTF

    • Project mention: php shell not executed in wordpress | /r/hacking | 2023-12-08

    Also https://github.com/swisskyrepo/PayloadsAllTheThings I'm sure there's a few test php files in here for filter bypasses too

  • hackingtool

    ALL IN ONE Hacking Tool For Hackers

  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

    InfluxDB logo

  • Ciphey

    ⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

    • Project mention: CyberChef from GCHQ: The Cyber Swiss Army Knife | news.ycombinator.com | 2024-02-01

    I also discovered Ciphey. Neat little tool indeed, but it's being deprecated. It's mentioned in this issue[1] and being replaced with Ares[2]. Neither could decipher this strange encryption[3] I used it on :(

    [1] https://github.com/Ciphey/Ciphey/issues/764

    [2] https://github.com/bee-san/Ares

    [3] "dEFLWWFKQWxRQW16RnkvbTZML0lsdz09" original text is "hacker"

  • spiderfoot

    SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

  • owasp-mastg

    The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).

    • Project mention: More ways to identify independently security tested apps on Google Play | news.ycombinator.com | 2023-11-03

  • dirsearch

    Web path scanner

    • Project mention: Looking for some help with this Python package | /r/learnpython | 2023-08-19

    I am new to Python. With the help of several users (thanks u/Diapolo10 and u/shiftybyte)I've been able to install Python and the dirsearch package. Dirsearch (https://github.com/maurosoria/dirsearch) allows for checking website paths with a wordlist. For example, I have a wordlist file with words like "dog", "cat", "bird", etc and I want to check the validity of those words as extensions on a website. Something like "example.com/bird", "example.com/cat", etc. I have a test wordlist in the same directory as dirsearch, but I am confused on how to proceed with the commands. I want to have it check my wordlist as extensions on the example.com website and then save output on if the webpath is valid or not. Just need a little bit of help.

  • urh

    Universal Radio Hacker: Investigate Wireless Protocols Like A Boss

    • Project mention: Flipper Zero: Multi-Tool Device for Geeks | news.ycombinator.com | 2024-01-21

    >> or somewhat expensive and complex SDR

    I don’t think that’s as accurate today as it used to be.

    On the hardware side there are tons of options very cheaply available - iirc the flipper uses the c1100 (or a number like that) it’s a popular cheap chip and it’s well documented and interfaces easily with arduino.

    More accessibly, lime mini SDRs are cheap but there’s quite a few alternatives too.

    On the software side GNU Radio is free with decent tutorials - we’re not talking anything like blender levels of difficulty to adopt even if it is a complex domain.

    Although on the more accessible side, urh is incredibly powerful given how easy to use it is https://github.com/jopohl/urh

    I used the latter to tap into a 2 channel wireless bbq thermometer via a $10 rtl sdr and that was a breeze, an absolute walk in the park compared to when I reverse engineered the flysky telemetry system.

  • WorkOS

    The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

    WorkOS logo

  • Osintgram

    Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname

    • Project mention: facebook hack | /r/Kalilinux | 2023-06-28

    If the tattoo studios aren't necessary to have been from facebook specifically, Osintgram is a pretty effective tool for scraping shit from Instagram really quickly that could theoretically be used to achieve this, if not perhaps in a roundabout sort of way like starting from one business you know and getting shit from their friends' info and so on. I could swear that I had known about a similar tool for facebook, but I'm drawing a blank right now...

  • hacktricks

    Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

    • Project mention: Where do you look for help when doing ctf | /r/Hacking_Tutorials | 2023-06-08

  • trape

    People tracker on the Internet: OSINT analysis and research tool by Jose Pino

    • Project mention: TRACK PEOPLE ON THE INTERNET: Learn to track your opps world, to avoid being traced | /r/make_money_online_vip | 2023-06-16

    Github Link

  • rengine

    reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.

    • Project mention: Any self-host FOSS suites for running phishing testing campaigns? | /r/selfhosted | 2023-05-21

    I couldn't find anything named reEngine, but I found reNgine ( https://yogeshojha.github.io/rengine/ ) which I think is what you meant.

  • pyWhat

    🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙‍♀️

  • caldera

    Automated Adversary Emulation Platform

    • Project mention: SOC Malware/Detection lab | /r/cybersecurity | 2023-07-03

    Also, for the attack emulation part you might be interested in CALDERA.

  • PhoneSploit-Pro

    An all-in-one hacking tool to remotely exploit Android devices using ADB and Metasploit-Framework to get a Meterpreter session.

  • h8mail

    Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email

    • Project mention: Search for sensitive data using theHarvester and h8mail tools | dev.to | 2023-12-01

  • Villain

    Villain is a C2 framework that can handle multiple TCP socket & HoaxShell-based reverse shells, enhance their functionality with additional features (commands, utilities etc) and share them among connected sibling servers (Villain instances running on different machines).

  • bbot

    A recursive internet scanner for hackers.

    • Project mention: [GitHub Action]: Wrappers for sqlmap, bbot and nikto | /r/cybersecurity | 2023-05-29

    Its not that much of a tool than wrappers of few awesome tools that most of you probably know and use today - sqlmap, bbot and nikto.

  • pentest-wiki

    PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.

  • Raccoon

    A high performance offensive security tool for reconnaissance and vulnerability scanning

  • hoaxshell

    A Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell.

    • Project mention: ExploitToolFinder | /r/hacking | 2023-06-16

  • github-dorks

    Find leaked secrets via github search

    • Project mention: Information Disclosure | dev.to | 2024-04-01

    Now, whenever we talk about source code the first thing that comes into mind is Github, we can also use Github Dorks to search secrets in the code, you will find useful search techniques in its cheatsheet, there is also a GitHub tool for that Github-Dorks.

  • TorBot

    Dark Web OSINT Tool

  • trackerjacker

    Like nmap for mapping wifi networks you're not connected to, plus device tracking

  • SaaSHub

    SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

    SaaSHub logo
NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).

Python Hacking related posts

Index

What are some of the best open-source Hacking projects in Python? This list will help you:

Project Stars
1 PayloadsAllTheThings 56,681
2 hackingtool 42,733
3 Ciphey 17,000
4 spiderfoot 11,723
5 owasp-mastg 11,272
6 dirsearch 11,213
7 urh 10,410
8 Osintgram 8,703
9 hacktricks 8,197
10 trape 7,919
11 rengine 6,737
12 pyWhat 6,352
13 caldera 5,175
14 PhoneSploit-Pro 4,177
15 h8mail 3,884
16 Villain 3,563
17 bbot 3,506
18 pentest-wiki 3,317
19 Raccoon 2,993
20 hoaxshell 2,886
21 github-dorks 2,647
22 TorBot 2,599
23 trackerjacker 2,570

Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com