原文地址: https://github.com/dloss/python-pentest-tools





  • Scapy , Scapy3k : 发送,嗅探,分析或者伪造数据包. 可交互式使用或者作为引用的库文件
  • pypcap , Pcapypylibpcap : 一些不同的libpcap的Python实现
  • libdnet : 低级别的网络程序,包括接口的查找和以太网帧传输
  • dpkt : 快速,简单的数据包创建/解析,包括基本的TCP / IP协议的定义
  • Impacket : 构造和解码网络数据包。包括更高级别的协议,如SMB和SMB支持
  • pynids : libnids wrapper offering
    sniffing, IP defragmentation, TCP stream reassembly and port scan
  • Dirtbags py-pcap : read pcap
    files without libpcap
  • flowgrep : grep through
    packet payloads using regular expressions
  • Knock Subdomain Scan , enumerate
    subdomains on a target domain through a wordlist
  • SubBrute , fast subdomain
    enumeration tool
  • Mallory , extensible
    TCP/UDP man-in-the-middle proxy, supports modifying non-standard
    protocols on the fly
  • Pytbull : flexible IDS/IPS testing
    framework (shipped with more than 300 tests)

Debugging and reverse engineering

  • Paimei : reverse engineering
    framework, includes PyDBG , PIDA,
  • Immunity Debugger :
    scriptable GUI and command line debugger
  • mona.py :
    PyCommand for Immunity Debugger that replaces and improves on
  • IDAPython : IDA Pro plugin that
    integrates the Python programming language, allowing scripts to run
    in IDA Pro
  • PyEMU : fully scriptable IA-32
    emulator, useful for malware analysis
  • pefile : read and work with
    Portable Executable (aka PE) files
  • pydasm :
    Python interface to the libdasm x86 disassembling library
  • PyDbgEng : Python wrapper for the
    Microsoft Windows Debugging Engine
  • uhooker :
    intercept calls to API calls inside DLLs, and also arbitrary
    addresses within the executable file in memory
  • diStorm : disassembler library
    for AMD64, licensed under the BSD license
  • python-ptrace :
    debugger using ptrace (Linux, BSD and Darwin system call to trace
    processes) written in Python
  • vdb / vtrace : vtrace is a
    cross-platform process debugging API implemented in python, and vdb
    is a debugger which uses it
  • Androguard : reverse
    engineering and analysis of Android applications
  • Capstone : lightweight
    multi-platform, multi-architecture disassembly framework with Python
  • PyBFD : Python interface
    to the GNU Binary File Descriptor (BFD) library


  • Sulley : fuzzer development and
    fuzz testing framework consisting of multiple extensible components
  • Peach Fuzzing Platform :
    extensible fuzzing framework for generation and mutation based
    fuzzing (v2 was written in Python)
  • antiparser : fuzz testing and
    fault injection API
  • TAOF , (The Art of Fuzzing)
    including ProxyFuzz, a man-in-the-middle non-deterministic network
  • untidy : general purpose XML fuzzer
  • Powerfuzzer : highly automated and
    fully customizable web fuzzer (HTTP protocol based application
  • Mistress :
    probe file formats on the fly and protocols with malformed data,
    based on pre-defined patterns
  • Fuzzbox :
    multi-codec media fuzzer
  • Forensic Fuzzing


    generate fuzzed files, fuzzed file systems, and file systems
    containing fuzzed files in order to test the robustness of forensics
    tools and examination systems

  • Windows IPC Fuzzing


    tools used to fuzz applications that use Windows Interprocess
    Communication mechanisms

  • WSBang :
    perform automated security testing of SOAP based web services
  • Construct : library for parsing
    and building of data structures (binary or textual). Define your
    data structures in a declarative manner
  • fuzzer.py


    simple fuzzer by Felipe Andres Manzano

  • Fusil : Python library
    used to write fuzzing programs


  • Requests : elegant and simple HTTP
    library, built for human beings
  • HTTPie : human-friendly cURL-like command line
    HTTP client
  • ProxMon :
    processes proxy logs and reports discovered issues
  • WSMap :
    find web service endpoints and discovery files
  • Twill : browse the Web from a command-line
    interface. Supports automated Web testing
  • Ghost.py : webkit web client written
    in Python
  • Windmill : web testing tool designed
    to let you painlessly automate and debug your web application
  • FunkLoad : functional and load web
  • spynner : Programmatic web
    browsing module for Python with Javascript/AJAX support
  • python-spidermonkey :
    bridge to the Mozilla SpiderMonkey JavaScript engine; allows for the
    evaluation and calling of Javascript scripts and functions
  • mitmproxy : SSL-capable, intercepting HTTP
    proxy. Console interface allows traffic flows to be inspected and
    edited on the fly
  • pathod / pathoc : pathological daemon/client
    for tormenting HTTP clients and servers


  • Volatility :
    extract digital artifacts from volatile memory (RAM) samples
  • Rekall :
    memory analysis framework developed by Google
  • LibForensics : library for
    developing digital forensics applications
  • TrIDLib , identify file types
    from their binary signatures. Now includes Python binding
  • aft : Android forensic toolkit

Malware analysis

  • pyew : command line hexadecimal
    editor and disassembler, mainly to analyze malware
  • Exefilter : filter file formats
    in e-mails, web pages or files. Detects many common file formats and
    can remove active content
  • pyClamAV : add
    virus detection capabilities to your Python software
  • jsunpack-n , generic
    JavaScript unpacker: emulates browser functionality to detect
    exploits that target browser and browser plug-in vulnerabilities
  • yara-python :
    identify and classify malware samples
  • phoneyc : pure Python
    honeyclient implementation
  • CapTipper : analyse, explore and
    revive HTTP malicious traffic from PCAP file


  • peepdf :
    Python tool to analyse and explore PDF files to find out if they can be harmful
  • Didier Stevens’ PDF


    : analyse,
    identify and create PDF files (includes PDFiD , pdf-parser and make-pdf and mPDF)

  • Opaf : Open PDF Analysis Framework.
    Converts PDF to an XML tree that can be analyzed and modified.
  • Origapy : Python wrapper
    for the Origami Ruby module which sanitizes PDF files
  • pyPDF2 : pure Python PDF toolkit: extract
    info, spilt, merge, crop, encrypt, decrypt…
  • PDFMiner :
    extract text from PDF files
  • python-poppler-qt4 :
    Python binding for the Poppler PDF library, including Qt4 support


  • InlineEgg :
    toolbox of classes for writing small assembly programs in Python
  • Exomind :
    framework for building decorated graphs and developing open-source
    intelligence modules and ideas, centered on social network services,
    search engines and instant messaging
  • RevHosts : enumerate
    virtual hosts for a given IP address
  • simplejson : JSON
    encoder/decoder, e.g. to use

    Google’s AJAX


  • PyMangle : command line tool
    and a python library used to create word lists for use with other
    penetration testing tools
  • Hachoir : view and
    edit a binary stream field by field
  • py-mangle : command line tool
    and a python library used to create word lists for use with other
    penetration testing tools

Other useful libraries and tools

  • IPython : enhanced interactive Python
    shell with many features for object introspection, system shell
    access, and its own special command system
  • Beautiful Soup :
    HTML parser optimized for screen-scraping
  • matplotlib : make 2D plots of
  • Mayavi : 3D scientific
    data visualization and plotting
  • RTGraph3D : create
    dynamic graphs in 3D
  • Twisted : event-driven networking engine
  • Suds : lightweight SOAP client for
    consuming Web Services
  • M2Crypto :
    most complete OpenSSL wrapper
  • NetworkX : graph library (edges, nodes)
  • Pandas : library providing
    high-performance, easy-to-use data structures and data analysis
  • pyparsing : general parsing
  • lxml : most feature-rich and easy-to-use library
    for working with XML and HTML in the Python language
  • Whoosh : fast, featureful
    full-text indexing and searching library implemented in pure Python
  • Pexpect : control and automate
    other programs, similar to Don Libes `Expect` system
  • Sikuli , visual technology
    to search and automate GUIs using screenshots. Scriptable in Jython
  • PyQt and PySide : Python bindings for the Qt
    application framework and GUI library


More stuff

转载本站任何文章请注明:转载至神刀安全网,谢谢神刀安全网 » 渗透测试之Python工具箱

分享到:更多 ()

评论 10

  1. #1

    pay day same day online loans payday loans instant [url=https://loansfor.cars]online cash advances[/url]

    Speedy Cash2周前 (05-03)
  2. #2

    pay day payday loans payday loans [url=https://loansfor.cars]pay day[/url]

    匿名2周前 (05-03)
  3. #3

    payday loans payday loans payday loans [url=https://loansfor.cars]pay day[/url]

    匿名2周前 (05-04)
  4. #4

    payday loans bad credit pay day loan pay day loan [url=https://loansfor.cars]payday loans online[/url]

    匿名2周前 (05-04)
  5. #5

    pay day top debt consolidation companies pay day [url=https://loansfor.cars]pay day loans[/url]

    匿名1周前 (05-06)
  6. #6

    pay day payday loans salt lake city pay day [url=https://loansfor.cars]payday loans online[/url]

    匿名1周前 (05-06)
  7. #7

    pay day pay day pay day [url=https://loansfor.cars]pay day[/url]

    匿名1周前 (05-06)
  8. #8

    bad credit payday loans pay day loans pay day [url=https://loansfor.cars]payday loans online[/url]

  9. #9

    wh0cd1331530 [url=http://levitra.college/]Generic Levitra[/url]

  10. #10

    wh0cd1331530 [url=http://levitra.college/]Levitra[/url]