Top 23 Python Pentest Projects

• PayloadsAllTheThings

  34 57,207 8.5 Python

  A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Project mention: php shell not executed in wordpress | /r/hacking | 2023-12-08

Also https://github.com/swisskyrepo/PayloadsAllTheThings I'm sure there's a few test php files in here for filter bypasses too

• objection

  17 7,050 1.6 Python

  📱 objection - runtime mobile exploration

  

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• DefaultCreds-cheat-sheet

  2 5,324 7.5 Python

  One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

• Villain

  2 3,590 6.9 Python

  Villain is a C2 framework that can handle multiple TCP socket & HoaxShell-based reverse shells, enhance their functionality with additional features (commands, utilities etc) and share them among connected sibling servers (Villain instances running on different machines).

• patator

  2 3,475 4.8 Python

  Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.

• pentest-wiki

  1 3,332 0.0 Python

  PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.

• snoop

  7 2,709 9.4 Python

  Snoop — инструмент разведки на основе открытых данных (OSINT world)

Project mention: Osint update of the Snoop Project tool search for user by nickname | news.ycombinator.com | 2024-01-02

• SaaSHub

  www.saashub.com featured

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

• CloudFlair

  1 2,407 2.8 Python

  🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.

• CloudFail

  1 2,153 2.0 Python

  Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

• macro_pack

  4 2,045 0.0 Python

  macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for pentest, demo, and social engineering assessments. The goal of macro_pack is to simplify exploitation, antimalware bypass, and automatize the process from malicious macro and script generation to final document generation. It also provides a lot of helpful features useful for redteam or security research.

• reconspider

  1 1,918 0.0 Python

  🔎 Most Advanced Open Source Intelligence (OSINT) Framework for scanning IP Address, Emails, Websites, Organizations.

• pwn_jenkins

  2 1,899 5.7 Python

  Notes about attacking Jenkins servers

• odat

  4 1,565 0.0 Python

  ODAT: Oracle Database Attacking Tool

• pyrdp

  5 1,439 8.6 Python

  RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact

  

Project mention: Researchers watched 100 hours of hackers hacking honeypot computers | news.ycombinator.com | 2023-08-10

The RDP interception tool used by the researchers: https://github.com/gosecure/pyrdp

• GraphQLmap

  1 1,306 0.0 Python

  GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. - Do not use for illegal testing ;)

• Redcloud

  1 1,184 0.0 Python

  Automated Red Team Infrastructure deployement using Docker

• SysReptor

  3 1,152 9.8 Python

  Fully customisable, offensive security reporting solution designed for pentesters, red teamers and other security-related people alike.

  

• enum4linux-ng

  1 1,037 6.1 Python

  A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and CTF players.

• BlackMamba

  1 990 0.0 Python

  C2/post-exploitation framework

• DumpsterFire

  3 959 0.0 Python

  "Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.

• BeeLogger

  2 958 0.0 Python

  Generate Gmail Emailing Keyloggers to Windows.

• VcenterKit

  1 894 6.0 Python

  Vcenter综合渗透利用工具包 | Vcenter Comprehensive Penetration and Exploitation Toolkit

Project mention: VcenterKit: Vcenter综合渗透利用工具包 | Vcenter Comprehensive Penetration and Exploitation Toolkit | /r/blueteamsec | 2023-08-26

• habu

  1 858 0.0 Python

  Hacking Toolkit

• SaaSHub

  www.saashub.com featured

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

Python Pentest related posts

• Osint update of the Snoop Project tool search for user by nickname

  1 project | news.ycombinator.com | 2 Jan 2024

• php shell not executed in wordpress

  1 project | /r/hacking | 8 Dec 2023

• Updated OSINT tool to search for user by nickname

  1 project | news.ycombinator.com | 29 Oct 2023

• XXE-XML External Entities Attacks

  2 projects | dev.to | 25 Oct 2023

• Snoop Project OSINT tool search by username on 3200 sites

  1 project | news.ycombinator.com | 14 Sep 2023

• Researchers watched 100 hours of hackers hacking honeypot computers

  2 projects | news.ycombinator.com | 10 Aug 2023

• New Attack Surface Discovery tool : OrgASM

  1 project | /r/cybersecurity | 31 May 2023
• A note from our sponsor - InfluxDB
  www.influxdata.com | 20 May 2024

  Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality. Learn more →

Index

Sponsored

SaaSHub - Software Alternatives and Reviews

SaaSHub helps you find the best software and product alternatives

www.saashub.com

Do not miss the trending Python projects with our weekly report!