Python.md

Tools Made of Python

Type	Name	Description	Star	Tags	Badges
Army-knife	Baudrillard Suite	Cross-platform security research toolkit with OSINT aggregation, memory forensics, social engineering tools, steganography, and predictive threat modeling.		osint recon forensics social-engineering steganography
Proxy	mitmproxy	An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.		mitmproxy
Recon	parameth	This tool can be used to brute discover GET and POST parameters
Recon	spiderfoot	SpiderFoot automates OSINT collection so that you can focus on analysis.		osint
Recon	3klCon	Automation Recon tool which works with Large & Medium scopes. It performs more than 20 tasks and gets back all the results in separated files.
Recon	apkleaks	Scanning APK file for URIs, endpoints & secrets.		apk url endpoint
Recon	dirsearch	Web path scanner
Recon	ParamWizard	ParamWizard is a powerful Python-based tool designed for extracting and identifying URLs with parameters from a specified website.		param
Recon	pagodo	pagodo (Passive Google Dork) - Automate Google Hacking Database scraping and searching
Recon	SecretFinder	SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files
Recon	Parth	Heuristic Vulnerable Parameter Scanner		param
Recon	waymore	Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan, VirusTotal & Intelligence X!		url
Recon	bbot	OSINT automation for hackers		osint
Recon	Dr. Watson	Dr. Watson is a simple Burp Suite extension that helps find assets, keys, subdomains, IP addresses, and other useful information		param subdomains
Recon	altdns	Generates permutations, alterations and mutations of subdomains and then resolves them		dns subdomains
Recon	xnLinkFinder	A python tool used to discover endpoints (and potential parameters) for a given target		js-analysis
Recon	BLUTO	DNS Analysis Tool		dns
Recon	Arjun	HTTP parameter discovery suite.		param
Recon	HydraRecon	All In One, Fast, Easy Recon Tool
Recon	knock	Knock Subdomain Scan		subdomains
Recon	Sublist3r	Fast subdomains enumeration tool for penetration testers		subdomains
Recon	uro	declutters url lists for crawling/pentesting		url
Recon	OneForAll	OneForAll是一款功能强大的子域收集工具
Recon	Silver	Mass scan IPs for vulnerable services		port
Recon	longtongue	Customized Password/Passphrase List inputting Target Info
Recon	GitMiner	Tool for advanced mining for content on Github
Recon	ParamSpider	Mining parameters from dark corners of Web Archives		param
Recon	BurpJSLinkFinder			js-analysis
Recon	dnsvalidator	Maintains a list of IPv4 DNS servers by verifying them against baseline servers, and ensuring accurate responses.		dns
Recon	STEWS	A Security Tool for Enumerating WebSockets
Recon	SubBrute	https://github.com/TheRook/subbrute		subdomains
Recon	HostHunter	Recon tool for discovering hostnames using OSINT techniques.		osint
Recon	Photon	Incredibly fast crawler designed for OSINT.		osint crawl
Recon	Lepus	Subdomain finder		subdomains
Recon	graphw00f	GraphQL Server Engine Fingerprinting utility		graphql
Recon	cc.py	Extracting URLs of a specific target based on the results of "commoncrawl.org"		url
Recon	FavFreak	Making Favicon.ico based Recon Great again !
Recon	LinkFinder	A python script that finds endpoints in JavaScript files		js-analysis
Fuzzer	ParamPamPam	This tool for brute discover GET and POST parameters.		param cache-vuln
Fuzzer	wfuzz	Web application fuzzer
Fuzzer	Clairvoyance	Obtain GraphQL API schema even if the introspection is disabled		graphql
Fuzzer	GAP	This is an evolution of the original getAllParams extension for Burp. Not only does it find more potential parameters for you to investigate, but it also finds potential links to try these parameters on.		param
Fuzzer	BatchQL	GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations		graphql
Fuzzer	SSRFmap	Automatic SSRF fuzzer and exploitation tool		ssrf
Fuzzer	CrackQL	CrackQL is a GraphQL password brute-force and fuzzing utility.		graphql
Fuzzer	SSTImap	Automatic SSTI detection tool with interactive interface		ssti
Fuzzer	GraphQLmap	GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes.		graphql
Scanner	Oralyzer	Open Redirection Analyzer
Scanner	PwnXSS	Vulnerability (XSS) scanner exploit		xss
Scanner	AWSBucketDump	Security Tool to Look For Interesting Files in S3 Buckets		s3
Scanner	zap-cli	A simple tool for interacting with OWASP ZAP from the commandline.
Scanner	LFISuite	Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner
Scanner	Corsy	CORS Misconfiguration Scanner		cors
Scanner	V3n0M-Scanner	Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns		sqli xss lfi rfi
Scanner	commix	Automated All-in-One OS Command Injection Exploitation Tool.		exploit
Scanner	LOXS	best tool for finding SQLi,CRLF,XSS,LFi,OpenRedirect		xss sqli crlf lfi open-redirect
Scanner	NoSQLMap	Automated NoSQL database enumeration and web application exploitation tool.		nosqli
Scanner	corsair_scan	Corsair_scan is a security tool to test Cross-Origin Resource Sharing (CORS).		cors
Scanner	sqlmap	Automatic SQL injection and database takeover tool		sqli
Scanner	DSSS	Damn Small SQLi Scanner		sqli
Scanner	CMSmap	CMSmap is a python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.		web-scanner vulnerability-scanner
Scanner	AuthMatrix			aaa
Scanner	NoXss	Faster xss scanner,support reflected-xss and dom-xss		xss
Scanner	XSStrike	Most advanced XSS scanner.		xss
Scanner	sqliv	massive SQL injection vulnerability scanner		sqli
Scanner	depenfusion	A powerful pentesting tool for detecting and exploiting dependency confusion vulnerabilities in Node.js projects		dependency-confusion
Scanner	xsssniper	An automatic XSS discovery tool		xss
Scanner	SQLiDetector	Simple python script supported with BurpBouty profile that helps you to detect SQL injection "Error based" by sending multiple requests with 14 payloads and checking for 152 regex patterns for different databases.		sqli
Scanner	S3Scanner	Scan for open AWS S3 buckets and dump the contents		s3
Scanner	http-request-smuggling	HTTP Request Smuggling Detection Tool
Scanner	rapidscan	The Multi-Tool Web Vulnerability Scanner.
Scanner	OpenRedireX	A Fuzzer for OpenRedirect issues
Scanner	S3cret Scanner	Hunting For Secrets Uploaded To Public S3 Buckets		s3
Scanner	Striker	Striker is an offensive information and vulnerability scanner.
Scanner	a2sv	Auto Scanning to SSL Vulnerability		ssl
Scanner	autopoisoner	Web cache poisoning vulnerability scanner.		cache-vuln
Scanner	tplmap	Server-Side Template Injection and Code Injection Detection and Exploitation Tool
Scanner	gitGraber	gitGraber
Scanner	xsser	Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications.		xss
Scanner	semgrep	Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.		sast code-analysis
Scanner	smuggler	Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3		smuggle
Scanner	VHostScan	A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
Scanner	dependency-confusion-scanner	This small repo is meant to scan Github's repositories for potential Dependency confusion vulnerabilities.		dependency-confusion
Scanner	XssPy	Web Application XSS Scanner		xss
Scanner	xsscrapy	XSS/SQLi spider. Give it a URL and it'll test every link it finds for XSS and some SQLi.		xss
Scanner	wapiti	Web application vulnerability scanner. Wapiti allows you to audit the security of your websites or web applications.		vulnerability-scanner web-scanner
Scanner	Autorize			aaa
Scanner	deadlinks	Health checks for your documentation links.		broken-link
Scanner	cloud-audit	Fast, opinionated AWS security scanner with Terraform remediation and attack chain detection		aws cloud security terraform
Exploit	ghauri	An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws		sqli
Exploit	toxssin	An XSS exploitation command-line interface and payload generator.		xss
Exploit	of-CORS	Identifying and exploiting CORS misconfigurations on the internal networks		cors
Exploit	Gopherus	This tool generates gopher link for exploiting SSRF and gaining RCE in various servers		ssrf
Exploit	XSRFProbe	The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
Exploit	Liffy	Local file inclusion exploitation tool		lfi
Exploit	jwt_tool	A toolkit for testing, tweaking and cracking JSON Web Tokens		jwt authentication
Utils	zip-bomb	Create a ZIPBomb for a given uncompressed size (flat and nested modes).		zipbomb
Utils	docem	Uility to embed XXE and XSS payloads in docx,odt,pptx,etc (OXML_XEE on steroids)		xxe xss
Utils	burp-exporter
Utils	Atlas	Quick SQLMap Tamper Suggester		sqli
Utils	gRPC-Web Pentest Suite	gRPC-Pentest-Suite is set of tools for pentesting / hacking gRPC Web (gRPC-Web) applications.		gRPC-Web
Utils	230-OOB	An Out-of-Band XXE server for retrieving file contents over FTP.		xxe
Utils	argumentinjectionhammer	A Burp Extension designed to identify argument injection vulnerabilities.
Utils	tiscripts	Turbo Intruder Scripts
Utils	pentest-tools	Custom pentesting tools
Utils	inql
Utils	PayloadsAllTheThings	A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Utils	REcollapse	REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications		fuzz
Utils	h2spacex	HTTP/2 Single Packet Attack low level library based on Scapy		race-condition
Utils	httpie	modern, user-friendly command-line HTTP client for the API era		http
Utils	femida
Utils	ZipBomb	A simple implementation of ZipBomb in Python		zipbomb
Utils	grc	generic colouriser
Utils	nuclei-wordfence-cve	Every single day new templates are added to this repo based on updates on Wordfence.com		nuclei-templates
Utils	blackboxprotobuf	Blackbox protobuf is a Burp Suite extension for decoding and modifying arbitrary protobuf messages without the protobuf type definition.
Utils	Bug-Bounty-Toolz	BBT - Bug Bounty Tools
Utils	XSS-Catcher	Find blind XSS but why not gather data while you're at it.		xss blind-xss
Utils	Redcloud	Automated Red Team Infrastructure deployement using Docker		infra
Utils	GQLSpection	parses GraphQL introspection schema and generates possible queries		graphql
Env	Crimson	Web Application Security Testing automation.