Top 20 Python red-team Projects

caldera

1 16 6,037 8.8 Python

Automated Adversary Emulation Platform
Judoscale

judoscale.com featured

Save 47% on cloud hosting with autoscaling that just works. Judoscale integrates with Django, FastAPI, Celery, and RQ to make autoscaling easy and reliable. Save big, and say goodbye to request timeouts and backed-up task queues.
adversarial-robustness-toolbox

2 8 5,188 9.4 Python

Adversarial Robustness Toolbox (ART) - Python Library for Machine Learning Security - Evasion, Poisoning, Extraction, Inference - Red and Blue Teams
NetExec

3 2 3,752 9.8 Python

The Network Execution Tool

Project mention: Hack The Box Writeup: Heist | dev.to | 2024-07-05

NOTE: The last time I rooted this machine, it was July 2023. At time of editing, (July 2024), CrackMapExec has been deprecated, and it's generally recommended to use NetExec (NXC). The syntax should be very similar, and it should get you through this portion of the writeup.
Bashfuscator

4 1 1,726 0.0 Python

A fully configurable and extendable Bash obfuscation framework. This tool is intended to help both red team and blue team.
Ghostwriter

5 2 1,478 9.6 Python

The SpecterOps project management and reporting engine (by GhostManager)
BlackMamba

6 1 1,046 0.0 Python

C2/post-exploitation framework
DumpsterFire

7 3 1,006 0.0 Python

"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
InfluxDB

influxdata.com featured

InfluxDB high-performance time series database. Collect, organize, and act on massive volumes of high-resolution data to power real-time intelligent systems.
resolvers

8 0 758 9.5 Python

The most exhaustive list of reliable DNS resolvers. (by trickest)
aiodnsbrute

9 1 650 0.0 Python

Python 3.5+ DNS asynchronous brute force utility
Kraken

10 1 528 6.0 Python

Kraken, a modular multi-language webshell coded by @secu_x11 (by kraken-ng)
slack-watchman

11 2 373 8.7 Python

Slack enumeration and exposed secrets detection tool

Project mention: Slack-Guardian VS slack-watchman - a user suggested alternative | libhunt.com/r/Slack-Guardian | 2024-12-14

Its similar in nature as it identifies the patterns but it doesnt delete the messages that are done in Slack Guardian
gitlab-watchman

12 1 197 8.1 Python

Finding exposed secrets and personal data in GitLab
ShonyDanza

13 1 120 1.1 Python

A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.
mediator

14 5 99 7.3 Python

An extensible, end-to-end encrypted reverse shell that works across networks without port forwarding. (by lawndoc)
msi-shenanigans

15 2 78 10.0 Python

Proof of Concept code and samples presenting emerging threat of MSI installer files.
TallGrass

16 1 59 0.0 Python

An AV exclusion enumeration tool written in Python.
hack_hard

17 1 29 5.7 Python

A nostalgic journey back to the era of retro RPGs with a cyber twist in the theme of Die Hard
CVE-2022-47966-Scan

18 1 27 1.8 Python

Python scanner for CVE-2022-47966. Supports ~10 of the 24 affected products.
Blinder

19 1 9 0.0 Python

Blinder is a tool that will help you simplify the exploitation of blind SQL injection
gh0stbust3rz

20 1 3 4.4 Python

Build a C2 system while becoming a techie Gh0stbust3r! Learn real-world RedTeam skills and even earn a basic c2 by completing the game
CodeRabbit

coderabbit.ai featured

CodeRabbit: AI Code Reviews for Developers. Revolutionize your code reviews with AI. CodeRabbit offers PR summaries, code walkthroughs, 1-click suggestions, and AST-based analysis. Boost productivity and code quality across all major languages with each PR.

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).

Python red-team discussion

Python red-team related posts

SOC Malware/Detection lab

2 projects | /r/cybersecurity | 3 Jul 2023
Automated penetration testing software?

2 projects | /r/AskNetsec | 16 May 2023
Endpoint Attack Simulation

1 project | /r/cybersecurity | 24 Feb 2023
MSI Shenanigans. Part 1 – Offensive Capabilities Overview – mgeeky's lair

1 project | /r/UIC | 20 Dec 2022
Do you know the Mitre tool "Caldera"? How can I build a plugin for it?

1 project | /r/blueteamsec | 4 Nov 2022
Malware testing service/site for our EDR Testing of SentinelOne

1 project | /r/sysadmin | 16 Sep 2022
Worm/ Replicating virus for demonstrating spread/lateral movement through a network.

1 project | /r/cybersecurity | 12 Aug 2022
A note from our sponsor - InfluxDB
influxdata.com | 17 Apr 2025

Collect, organize, and act on massive volumes of high-resolution data to power real-time intelligent systems. Learn more →

Index

What are some of the best open-source red-team projects in Python? This list will help you:

#	Project	Stars
1	caldera	6,037
2	adversarial-robustness-toolbox	5,188
3	NetExec	3,752
4	Bashfuscator	1,726
5	Ghostwriter	1,478
6	BlackMamba	1,046
7	DumpsterFire	1,006
8	resolvers	758
9	aiodnsbrute	650
10	Kraken	528
11	slack-watchman	373
12	gitlab-watchman	197
13	ShonyDanza	120
14	mediator	99
15	msi-shenanigans	78
16	TallGrass	59
17	hack_hard	29
18	CVE-2022-47966-Scan	27
19	Blinder	9
20	gh0stbust3rz	3