Security · Python · security Tools

sherlock

github

Hunt down social media accounts by username across social networks

mitmproxy

github

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

CheatSheetSeries

github

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

algo

github

Set up a personal VPN in the cloud

maigret

github

🕵️‍♂️ Collect a dossier on a person by username from 3000+ sites

wifiphisher

github

The Rogue Access Point Framework

opensnitch

github

OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.

mvt

github

MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.

scapy

github

Scapy: the Python-based interactive packet manipulation program & library.

objection

github

📱 objection - runtime mobile exploration

Mailpile

github

A free & open modern, fast email client with user-friendly encryption and privacy features

maltrail

github

Malicious traffic detection system

bandit

github

Bandit is a tool designed to find common security issues in Python code.

Awesome-WAF

github

Everything about Web Application Firewalls (WAFs) from Security Standpoint! 🔥

pyWhat

github

🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙‍♀️

onionshare

github

Securely and anonymously share files, host websites, and chat with friends using the Tor network

cowrie

github

Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/

faraday

github

Open Source Vulnerability Management Platform

NetAlertX

github

Centralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.

Anthropic-Cybersecurity-Skills

github

754 structured cybersecurity skills for AI agents · Mapped to 5 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND & NIST AI RMF · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 26 security domains · Apache 2.0

curl-impersonate

github

curl-impersonate: A special build of curl that can impersonate Chrome & Firefox

hackerone-reports

github

Top disclosed reports from HackerOne

can-i-take-over-xyz

github

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

clusterfuzz

github

Scalable fuzzing infrastructure.