SaaSHub helps you find the best software and product alternatives Learn more →
Top 21 Python Attack Projects
-
-
InfluxDB
InfluxDB – Built for High-Performance Time Series Workloads. InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.
-
-
adversarial-robustness-toolbox
Adversarial Robustness Toolbox (ART) - Python Library for Machine Learning Security - Evasion, Poisoning, Extraction, Inference - Red and Blue Teams
-
-
-
Security shouldn’t just be about stopping the bad, but understanding how the bad actually happens. Enter the MITRE ATT&CK framework. Built from years of real-world threat research, it offers a living map of how adversaries operate, move laterally, and exploit systems step by step. And when paired with a modern analytics platform, it turns that understanding into actionable visibility by showing exactly where your defenses are strong and, by contrast, where they may be weak.
-
stm32f1-picopwner
Dump read-out protected STM32F1's with a Pi Pico - A Pi Pico implementation of @JohannesObermaier's, Marc Schink's and Kosma Moczek's Glitch and FPB attack to bypass RDP (read-out protection) level 1 on STM32F1 chips
-
Stream
Stream - Scalable APIs for Chat, Feeds, Moderation, & Video. Stream helps developers build engaging apps that scale to millions with performant and flexible Chat, Feeds, Moderation, and Video APIs and SDKs powered by a global edge network and enterprise-grade infrastructure.
-
-
-
-
dheater
D(HE)ater is a proof of concept implementation of the D(HE)at attack (CVE-2002-20001) through which denial-of-service can be performed by enforcing the Diffie-Hellman key exchange. (read-only clone of the original GitLab project)
-
MISP-maltego
Set of Maltego transforms to inferface with a MISP Threat Sharing instance, and also to explore the whole MITRE ATT&CK dataset.
-
xssmap
Intelligent XSS detection tool that uses human techniques for looking for reflected cross-site scripting (XSS) vulnerabilities
-
stratocyberlab
A Cyber Range to learn hacking (both attacking & defending) techniques locally in your computer
Project mention: StratoCyberLab – open-source and local-only hacking lab | news.ycombinator.com | 2025-09-30 -
-
GETreqt-Multithreaded-Slow-DoS-Attack
A unique, multithreaded Slow DoS exploit against web servers that use vulnerable versions of thread-based web server software (Apache 1.x, Apache 2.x, httpd, etc.); and is effective against even some mitigation mechanisms such as poorly implemented reverse proxy servers.
-
RARNinja-RAR-Password-Cracking-Utility
A dictionary attack implementation, for the automated cracking of password-protected RAR files with the help of a supplied dictionary file. This project was created for experimental/observational purposes.
-
-
PoisoningCertifiedDefenses
How Robust are Randomized Smoothing based Defenses to Data Poisoning? (CVPR 2021)
-
-
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).
Python Attack discussion
Python Attack related posts
-
Why the MITRE ATT&CK Framework Actually Works
-
StratoCyberLab – open-source and local-only hacking lab
-
Bring Your Own Feed (BYOF): An Engineer's Guide to Effective Threat Intelligence
-
Cloudots: Cloud security telemetry knowledge-base dedicated to cloud logs
-
A Guide to the MITRE ATT&CK Framework: Understanding Tactics & Techniques
-
Building AI Agents to Prioritize CVEs — A Google ADK Guide
-
Threat Detection for AWS CloudTrail Logs
- A note from our sponsor - SaaSHub www.saashub.com | 24 Dec 2025
Index
What are some of the best open-source Attack projects in Python? This list will help you:
| # | Project | Stars |
|---|---|---|
| 1 | MHDDoS | 15,223 |
| 2 | wifiphisher | 14,311 |
| 3 | adversarial-robustness-toolbox | 5,734 |
| 4 | ThePhish | 1,285 |
| 5 | duckhunt | 529 |
| 6 | attack-stix-data | 499 |
| 7 | stm32f1-picopwner | 261 |
| 8 | Email-Bomber | 252 |
| 9 | hayabusa-rules | 211 |
| 10 | killchain | 206 |
| 11 | dheater | 204 |
| 12 | MISP-maltego | 182 |
| 13 | xssmap | 151 |
| 14 | stratocyberlab | 111 |
| 15 | rpl-attacks | 79 |
| 16 | GETreqt-Multithreaded-Slow-DoS-Attack | 42 |
| 17 | RARNinja-RAR-Password-Cracking-Utility | 37 |
| 18 | cerberus | 21 |
| 19 | PoisoningCertifiedDefenses | 13 |
| 20 | SkidKit | 8 |
| 21 | Heartbleed | 5 |
Sponsored
InfluxDB – Built for High-Performance Time Series Workloads
InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.
www.influxdata.com