Top 23 Python pentest-tool Projects

• dirsearch

  12 11,179 7.9 Python

  Web path scanner

Project mention: Looking for some help with this Python package | /r/learnpython | 2023-08-19

I am new to Python. With the help of several users (thanks u/Diapolo10 and u/shiftybyte)I've been able to install Python and the dirsearch package. Dirsearch (https://github.com/maurosoria/dirsearch) allows for checking website paths with a wordlist. For example, I have a wordlist file with words like "dog", "cat", "bird", etc and I want to check the validity of those words as extensions on a website. Something like "example.com/bird", "example.com/cat", etc. I have a test wordlist in the same directory as dirsearch, but I am confused on how to proceed with the commands. I want to have it check my wordlist as extensions on the example.com website and then save output on if the webpath is valid or not. Just need a little bit of help.

• OneForAll

  0 7,643 3.1 Python

  OneForAll是一款功能强大的子域收集工具

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• PhoneSploit-Pro

  1 4,165 7.4 Python

  An all-in-one hacking tool to remotely exploit Android devices using ADB and Metasploit-Framework to get a Meterpreter session.

• kb

  8 3,090 3.0 Python

  A minimalist command line knowledge base manager

• Raccoon

  4 2,993 0.0 Python

  A high performance offensive security tool for reconnaissance and vulnerability scanning

• CloudFlair

  1 2,375 2.8 Python

  🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.

• odat

  4 1,551 0.0 Python

  ODAT: Oracle Database Attacking Tool

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• evillimiter

  11 1,478 0.0 Python

  Tool that monitors, analyzes and limits the bandwidth of devices on the local network without administrative access.

• Lockdoor-Framework

  2 1,291 2.7 Python

  🔐 Lockdoor Framework : A Penetration Testing framework with Cyber Security Resources

• CrossLinked

  1 1,140 5.6 Python

  LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping

• BlackMamba

  1 973 0.0 Python

  C2/post-exploitation framework

• DumpsterFire

  3 959 0.0 Python

  "Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.

• Pompem

  1 939 10.0 Python

  Find exploit tool

• habu

  1 855 0.0 Python

  Hacking Toolkit

• msdat

  2 802 3.3 Python

  MSDAT: Microsoft SQL Database Attacking Tool

• subscraper

  1 734 0.0 Python

  Subdomain and target enumeration tool built for offensive security testing

• SSTImap

  5 637 3.1 Python

  Automatic SSTI detection and exploitation tool with interactive interface

• overlord

  1 606 0.0 Python

  Overlord - Red Teaming Infrastructure Automation (by qsecure-labs)

  

• CRLFsuite

  2 498 3.7 Python

  The most powerful CRLF injection (HTTP Response Splitting) scanner.

• pymeta

  1 447 3.6 Python

  Utility to download and extract document metadata from an organization. This technique can be used to identify: domains, usernames, software/version numbers and naming conventions.

Project mention: How to download all files from a google search? | /r/OSINT | 2023-06-05

PyMeta has worked wonders for me!

• PivotSuite

  1 419 2.8 Python

  Network Pivoting Toolkit

• SBSCAN

  1 391 8.3 Python

  SBSCAN是一款专注于spring框架的渗透测试工具，可以对指定站点进行springboot未授权扫描/敏感信息扫描以及进行spring框架漏洞扫描与验证的综合利用工具。 [SBSCAN is a penetration testing tool focused on the spring framework that can scan springboot sensitive information/unauthorized for specified sites and scan and validate spring related vulnerabilities]

Project mention: A penetration testing tool for the spring framework | /r/cybersecurity | 2023-10-27

$ git clone https://github.com/sule01u/SBSCAN.git $ cd SBSCAN $ pip3 install -r requirements.txt $ python3 sbscan.py --help

• userefuzz

  2 367 2.7 Python

  User-Agent , X-Forwarded-For and Referer SQLI Fuzzer

Project mention: Help | /r/programminghorror | 2023-05-09

• SaaSHub

  www.saashub.com sponsored

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

Python pentest-tool related posts

• Help
  1 project | /r/programminghorror | 9 May 2023
• Crlfsuite - Fast crlf injection scanning tool
  1 project | /r/github_trends | 16 Jun 2022
• WebChecker - A Simple Tool To Identify Cs Platforms
  1 project | /r/hacking | 12 Jun 2022
• How to keep a SOC on their toes
  2 projects | /r/AskNetsec | 18 Nov 2021
• My Cybersecurity teacher issued a challenge
  2 projects | /r/Hacking_Tutorials | 12 Nov 2021
• Any recommendations for network scanner with web UI?
  4 projects | /r/selfhosted | 31 Oct 2021
• About me | #FirstPost
  2 projects | dev.to | 28 Aug 2021
• A note from our sponsor - InfluxDB
  www.influxdata.com | 19 Apr 2024

  Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality. Learn more →

Index

Sponsored

SaaSHub - Software Alternatives and Reviews

SaaSHub helps you find the best software and product alternatives

www.saashub.com

Do not miss the trending Python projects with our weekly report!