Best Python Tools & Libraries

manticore

github

Symbolic execution tool

Windrecorder

github

Windrecorder is a memory search app by records everything on your screen in small size, to let you rewind what you have seen, query through OCR text or image description, and get activity statistics, like Microsoft's Windows Recall or Rewind.

pocsuite3

github

pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.

sslyze

github

Fast and powerful SSL/TLS scanning library.

pentest-wiki

github

PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.

AI-Infra-Guard

github

A full-stack AI Red Teaming platform securing AI ecosystems via OpenClaw Security Scan, Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.

xunfeng

github

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

tracecat

github

Open-source security automation platform for teams and AI agents

AppInfoScanner

github

一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。

vulmap

github

Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能

TextAttack

github

TextAttack 🐙 is a Python framework for adversarial attacks, data augmentation, and model training in NLP https://textattack.readthedocs.io/en/master/

oletools

github

oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.

timesketch

github

Collaborative forensic timeline analysis

pentest-tools

github

A collection of custom security tools for quick needs.

archivy

github

Archivy is a self-hostable knowledge repository that allows you to learn and retain information in your own personal and extensible wiki.

chipsec

github

Platform Security Assessment Framework

LogonTracer

github

Investigate malicious Windows logon by visualizing and analyzing Windows event log

shynet

github

Modern, privacy-friendly, and detailed web analytics that works without cookies or JS.

itsdangerous

github

Safely pass trusted data to untrusted environments and back.

coreruleset

github

OWASP CRS (Official Repository)

basic-memory

github

AI conversations that actually remember. Never re-explain your project to your AI again. Join our Discord: https://discord.gg/tyvKNccgqN

APT_REPORT

github

Interesting APT Report Collection And Some Special IOCs

streamalert

github

StreamAlert is a serverless, realtime data analysis framework which empowers you to ingest, analyze, and alert on data from any environment, using datasources and alerting logic you define.

awesome-game-security

github

awesome game security [Welcome to PR]