python安全和代码审计相关资料收集 resource collection of python security and code review

🐍 🔍 GuardDog is a CLI tool to Identify malicious PyPI and npm packages

Open source local-first PR scanner that finds dead code, security bugs, secrets, quality regressions, and AI-code mistakes before merge. For first timers refer to https://duriantaco.github.io/skylos/repo-map/

Python for cybersecurity with the basic concepts, easy to understand code examples, lab exercises, real-world examples, different security scripts covering web security, network security, defensive security, crypto examples, exploits etc...

Supply Chain Firewall (SCFW) is a tool for preventing the installation of malicious npm and PyPI packages 🔥

Vimana is a modular security framework for auditing Python APIs and Web applications. The plugin-based architecture enables security professionals to assess, fuzz, and analyze Python projects through automated and manual techniques.

Codeaudit - Modern Python source code security analyzer based on distrust.

GitHub - therealilyas/pentest-toolkit: PentestKit — Advanced penetration testing toolkit in Python & Bash for bug bounty and ethical hacking.

Linux Security Audit Tool

A Python-based backdoor and server communication tool for ethical hacking and reverse shell practice using socket programming.

Enumerate typosquatting, IDN homograph, bitsquatting, and visual spoofing candidates for red team engagements, threat hunting, and brand protection.

A secret file storage vault in python

MottaHunter: Advanced email reconnaissance tool for security professionals. Hunt emails across Google, Twitter, and LinkedIn, validate via SMTP, and generate smart permutations. Features rate limiting, catch-all detection, and permutation splitting for stealth operations.

Security skills for AI coding agents — incident response for supply chain attacks, credential rotation, IOC detection. Works with Claude Code, Codex, Cursor, or as standalone scripts and runbooks.

Offensive security blog, projects & portfolio by Elimane D.

Find authorization bugs before attackers do. Free SAST — IDOR detection, 100% CVE recall, 0% false positives. 5 languages. Fully offline.

A zero dependency lightweight static analyzer + CVE scanner designed for adversarial-shape code in python to detect supply chain attacks before they reach your interpreter.

The Local Python Code Protector Script is a command-line tool designed to provide source code protection and secure code sharing for Python scripts. It allows developers to obfuscate their Python code. This script supports both Python source files (.py) and compiled Python files (.pyc), offering flexible options for code obfuscation and encryption.

Python Security Bootcamp aims at helping people with solving,automating challenges in security using python.

Combine multiple popular python security tools and generate reports or output into different formats