SaaSHub helps you find the best software and product alternatives Learn more →
Top 21 Python Attack Projects
-
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
-
-
adversarial-robustness-toolbox
Adversarial Robustness Toolbox (ART) - Python Library for Machine Learning Security - Evasion, Poisoning, Extraction, Inference - Red and Blue Teams
Project mention: AI Red-Teaming for Beginners: Where to Start and What to Test | dev.to | 2026-04-16Prompt injection and jailbreaking are the starting point. The next layer is adversarial machine learning: crafting inputs that fool ML classifiers, testing model robustness with Adversarial Robustness Toolbox (ART), and evaluating training data poisoning risk. That work requires more ML background, but MITRE ATLAS and NIST AI 100-2 (Adversarial Machine Learning taxonomy) are good references as you go deeper.
-
-
Project mention: What Training Exists for Security Professionals Learning AI and Data Science? | dev.to | 2026-05-23
Does the curriculum map to a threat model? A real applied course connects each technique to specific MITRE ATT&CK tactics so the student knows what their model catches and what it misses. Living-off-the-land techniques (T1047, T1218) and slow-and-low attackers (sub-1% of normal traffic) are designed to defeat naive anomaly detection. A working curriculum teaches the gap, not just the algorithm.
-
-
stm32f1-picopwner
Dump read-out protected STM32F1's with a Pi Pico - A Pi Pico implementation of @JohannesObermaier's, Marc Schink's and Kosma Moczek's Glitch and FPB attack to bypass RDP (read-out protection) level 1 on STM32F1 chips
First I'd like to point out that "Decryptor" is an ill-chosen term: there's no encryption mechanism here, RDP is a software lock based on an internal flash state.
This dongle is very likely to be this original attack https://github.com/JohannesObermaier/f103-analysis/tree/mast... but now packaged. If you want to read more this repo has the best doc: https://github.com/CTXz/stm32f1-picopwner. It's a multi-step attack where a payload is executed from persisted SRAM (RDP1 means you can read/write to it) after a quick reset. The fact that they mention freezing the chip heavily weighs in that direction since it's needed for higher clock chips.
-
-
-
dheater
D(HE)ater is a proof of concept implementation of the D(HE)at attack (CVE-2002-20001) through which denial-of-service can be performed by enforcing the Diffie-Hellman key exchange. (read-only clone of the original GitLab project)
-
-
MISP-maltego
Set of Maltego transforms to inferface with a MISP Threat Sharing instance, and also to explore the whole MITRE ATT&CK dataset.
-
xssmap
Intelligent XSS detection tool that uses human techniques for looking for reflected cross-site scripting (XSS) vulnerabilities
-
stratocyberlab
A Cyber Range to learn hacking (both attacking & defending) techniques locally in your computer
Project mention: StratoCyberLab – open-source and local-only hacking lab | news.ycombinator.com | 2025-09-30 -
-
GETreqt-Multithreaded-Slow-DoS-Attack
A unique, multithreaded Slow DoS exploit against web servers that use vulnerable versions of thread-based web server software (Apache 1.x, Apache 2.x, httpd, etc.); and is effective against even some mitigation mechanisms such as poorly implemented reverse proxy servers.
-
RARNinja-RAR-Password-Cracking-Utility
A dictionary attack implementation, for the automated cracking of password-protected RAR files with the help of a supplied dictionary file. This project was created for experimental/observational purposes.
-
-
PoisoningCertifiedDefenses
How Robust are Randomized Smoothing based Defenses to Data Poisoning? (CVPR 2021)
-
-
NOTE:
The open source projects on this list are ordered by number of github stars.
The number of mentions indicates repo mentiontions in the last 12 Months or
since we started tracking (Dec 2020).
Python Attack discussion
Python Attack related posts
-
What Training Exists for Security Professionals Learning AI and Data Science?
-
Who Teaches Applied AI and Machine Learning for Security Practitioners?
-
Why the MITRE ATT&CK Framework Actually Works
-
StratoCyberLab – open-source and local-only hacking lab
-
Bring Your Own Feed (BYOF): An Engineer's Guide to Effective Threat Intelligence
-
Cloudots: Cloud security telemetry knowledge-base dedicated to cloud logs
-
A Guide to the MITRE ATT&CK Framework: Understanding Tactics & Techniques
-
A note from our sponsor - SaaSHub
www.saashub.com | 21 Jun 2026
Index
What are some of the best open-source Attack projects in Python? This list will help you:
| # | Project | Stars |
|---|---|---|
| 1 | MHDDoS | 16,193 |
| 2 | wifiphisher | 14,559 |
| 3 | adversarial-robustness-toolbox | 6,042 |
| 4 | ThePhish | 1,334 |
| 5 | attack-stix-data | 588 |
| 6 | duckhunt | 534 |
| 7 | stm32f1-picopwner | 292 |
| 8 | Email-Bomber | 262 |
| 9 | hayabusa-rules | 221 |
| 10 | dheater | 213 |
| 11 | killchain | 206 |
| 12 | MISP-maltego | 186 |
| 13 | xssmap | 151 |
| 14 | stratocyberlab | 132 |
| 15 | rpl-attacks | 84 |
| 16 | GETreqt-Multithreaded-Slow-DoS-Attack | 45 |
| 17 | RARNinja-RAR-Password-Cracking-Utility | 40 |
| 18 | cerberus | 21 |
| 19 | PoisoningCertifiedDefenses | 14 |
| 20 | SkidKit | 7 |
| 21 | Heartbleed | 5 |
Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com