awesome-python-security

Security resources

A curated list of security resources and tools for Python developers.

Awesome Python Security resources 🕶🐍🔐

GitHub

916 stars
43 watching
96 forks
last commit: about 3 years ago
Linked from 1 awesome list

awesomeawesome-listpythonsecuritysecurity-testingsecurity-toolsstatic-analysis

Tools / Web Framework Hardening

Secure.py908almost 2 years agosecure.py 🔒 is a lightweight package that adds optional security headers and cookie attributes for Python web frameworks
Flask-HTTPAuth1,268about 2 years agoSimple extension that provides Basic, Digest and Token HTTP authentication for Flask routes
Flask Talisman925over 2 years agoTalisman is a small Flask extension that handles setting HTTP headers that can help protect against a few common web application security issues
Django deployment checklistWeb framework Django has built-in feature to check for security configurations: run this command . It's really helpful as it already included in the framework
Django Session CSRF111over 7 years agoCSRF protection for Django without cookies

Tools / Multi tools

hawkeye359about 5 years agoMulti purpose security/vulnerability/risk scanning tool supporting Ruby, Node.js, Python, PHP and Java
GuardRailsA GitHub App that gives you instant security feedback in your Pull Requests
Hubble379about 3 years agoHubble is a modular, open-source security compliance framework
Salus25over 2 years agoMulti purpose security scanning tool supporting Ruby, Node, Python and Go

Tools / Static Code Analysis

Bandit6,559almost 2 years agoBandit is a tool designed to find common security issues in Python code
Pyt2,181over 5 years agoA Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications
Detect SecretsAn enterprise friendly way of detecting and preventing secrets in code

Tools / Vulnerabilities and Security Advisories

Safety1,758almost 2 years agoSafety checks your installed dependencies for known security vulnerabilities
snyk Vulnerability DBCommercial but free listing of known vulnerabilities in libraries
Common Vulnerabilities and ExposuresVulnerabilities that were assigned a CVE. Covers the language and packages
National Vulnerability DatabasePython known vulnerabilities in the National Vulnerability Database

Tools / Penetration Testing

EvilTwinFramework282about 2 years agoA framework for pentesters that facilitates evil twin attacks as well as exploiting other wifi vulnerabilities
sqlmap32,841almost 2 years agoAutomatic SQL injection and database takeover tool

Tools / Cryptography

PasslibSecure password storage/hashing library, very high level
PyNacl1,079almost 2 years agoPython binding to the Networking and Cryptography (NaCl) library

Tools / Application Templates

wemake-django-template2,015almost 2 years agoBleeding edge template focused on code quality and security

Educational / Hacking Playground

Let's be bad Guys186about 2 years agoShiny, Let's Be Bad Guys: Exploiting and Mitigating the Top 10 Web App Vulnerabilities
django.nV202almost 5 years agodjango.nV is a purposefully vulnerable Django application provided by nVisium
DSVW794over 2 years agoDamn Small Vulnerable Web (DSVW) is a deliberately vulnerable web application written in under 100 lines of code, created for educational purposes
DVPWA164over 2 years agoDamn Vulnerable Python Web Application was inspired by famous dvwa project and bobby-tables xkcd comics

Educational / Books

Full Stack Python SecurityA comprehensive look at cybersecurity for Python developers

Educational / Articles, Guides & Talks

cryptographyA package designed to expose cryptographic primitives and recipes to Python developers
10 Common Security Gotchas in Python10 common security gotchas in Python and how to avoid them
OWASP Python SecurityAims at creating a hardened version of python that makes it easier for developers to write applications more resilient to attacks and manipulations
Django SecurityOverview of Django’s security features includes advice on securing a Django-powered site

Companies

GuardRailsA GitHub App that gives you instant security feedback in your Pull Requests
SnykA developer-first solution that automates finding & fixing known vulnerabilities in your dependencies

Other / Reporting Bugs

Python Security Reporting

Backlinks from these awesome lists:

More related projects: