An opinionated list of awesome Python frameworks, libraries, software and resources.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

real time face swap and one-click video deepfake with only a single image

🕵️‍♂️ Offensive Google framework.

Impacket is a collection of Python classes for working with network protocols.

The Rogue Access Point Framework

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

Web path scanner

Nuitka is a Python compiler written in Python. It's fully compatible with Python 2.6, 2.7, 3.4-3.12. You feed it your Python app, it does a lot of clever things, and spits out an executable or exte…

Transparent proxy server that works as a poor man's VPN. Forwards over ssh. Doesn't require admin. Works with Linux and MacOS. Supports DNS tunneling.

Credentials recovery project

A cross platform front-end GUI of the popular youtube-dl written in wxPython.

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C

A swiss army knife for pentesting networks

Python Cheat Sheet

holehe allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function.

Typed interactions with the GitHub API v3

Web application fuzzer

Insular email distribution - mail server as Docker images

A recursive internet scanner for hackers.

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

A flask template with Bootstrap, asset bundling+minification with webpack, starter templates, and registration/authentication. For use with cookiecutter.

Common User Passwords Profiler (CUPP)

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

Windows Exploit Suggester - Next Generation

Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email

P4wnP1 is a highly customizable USB attack platform, based on a low cost Raspberry Pi Zero or Raspberry Pi Zero W.

Veil 3.1.X (Check version info in Veil at runtime)