Skip to content
46

Contents

Awesome Python Security resources πŸ•ΆπŸπŸ”

961 stars125 forks33 entriesLast push Aug 24, 2023 (3 years ago)License none

This page lists names, links and short descriptions. The original list on GitHub is the source and belongs to its authors.

Web Framework Hardening

Secure.py

secure.py πŸ”’ is a lightweight package that adds optional security headers and cookie attributes for Python web frameworks.

Flask-HTTPAuth

Simple extension that provides Basic, Digest and Token HTTP authentication for Flask routes.

In 2 lists

Flask Talisman

Talisman is a small Flask extension that handles setting HTTP headers that can help protect against a few common web application security issues.

Django deployment checklist

Web framework Django has built-in feature to check for security configurations: run this command manage.py check --deploy. It's really helpful as it already included in the framework.

Django Session CSRF

CSRF protection for Django without cookies.

Multi tools

hawkeye

Multi purpose security/vulnerability/risk scanning tool supporting Ruby, Node.js, Python, PHP and Java.

In 2 lists

GuardRails

A GitHub App that gives you instant security feedback in your Pull Requests.

In 4 listsDetails

Hubble

Hubble is a modular, open-source security compliance framework.

Salus

Multi purpose security scanning tool supporting Ruby, Node, Python and Go.

Static Code Analysis

Bandit

Bandit is a tool designed to find common security issues in Python code.

In 6 listsDetails

Pyt

A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications.

In 2 lists

Detect Secrets

An enterprise friendly way of detecting and preventing secrets in code.

Vulnerabilities and Security Advisories

Safety

Safety checks your installed dependencies for known security vulnerabilities.

In 2 lists

snyk Vulnerability DB

Commercial but free listing of known vulnerabilities in libraries.

Common Vulnerabilities and Exposures

Vulnerabilities that were assigned a CVE. Covers the language and packages.

National Vulnerability Database

Python known vulnerabilities in the National Vulnerability Database.

Penetration Testing

EvilTwinFramework

A framework for pentesters that facilitates evil twin attacks as well as exploiting other wifi vulnerabilities.

sqlmap

Automatic SQL injection and database takeover tool

In 10 listsDetails

Cryptography

Passlib

Secure password storage/hashing library, very high level.

PyNacl

Python binding to the Networking and Cryptography (NaCl) library.

In 3 lists

Application Templates

wemake-django-template

Bleeding edge django template focused on code quality and security.

In 5 listsDetails

Hacking Playground

Let's be bad Guys

Shiny, Let's Be Bad Guys: Exploiting and Mitigating the Top 10 Web App Vulnerabilities.

django.nV

django.nV is a purposefully vulnerable Django application provided by nVisium.

DSVW

Damn Small Vulnerable Web (DSVW) is a deliberately vulnerable web application written in under 100 lines of code, created for educational purposes.

In 3 lists

DVPWA

Damn Vulnerable Python Web Application was inspired by famous dvwa project and bobby-tables xkcd comics.

Books

Full Stack Python Security

A comprehensive look at cybersecurity for Python developers

In 2 lists

Articles, Guides & Talks

cryptography

A package designed to expose cryptographic primitives and recipes to Python developers.

In 2 lists

10 Common Security Gotchas in Python

10 common security gotchas in Python and how to avoid them.

OWASP Python Security

Aims at creating a hardened version of python that makes it easier for developers to write applications more resilient to attacks and manipulations.

Django Security

Overview of Django’s security features includes advice on securing a Django-powered site.

Companies

GuardRails

A GitHub App that gives you instant security feedback in your Pull Requests.

In 3 lists

Snyk

A developer-first solution that automates finding & fixing known vulnerabilities in your dependencies.

In 14 listsDetails

Reporting Bugs

Python Security Reporting

See category
94

Awesome Rust

rust-unofficial/awesome-rust

A curated list of Rust code and resources.

Freshβ˜… 60k1833 entriesPushed today
94

Awesome Mac

jaywcjlove/awesome-mac

ο£Ώ This project is dedicated to collecting high-quality macOS software and organizing them systematically by different categories for easy search and use.

Freshβ˜… 115k1316 entriesPushed today
94

Awesome Python

vinta/awesome-python

Curated Python frameworks, libraries and resources.

Freshβ˜… 324k504 entriesPushed today
94

Awesome C++

fffaraz/awesome-cpp

A curated list of awesome C++ (or C) frameworks, libraries, resources, and shiny things. Inspired by awesome-... stuff.

Freshβ˜… 74k1358 entriesPushed yesterday
94

Awesome Go

avelino/awesome-go

Curated Go frameworks and libraries.

Freshβ˜… 186k3119 entriesPushed yesterday
94

Awesome PHP

ziadoz/awesome-php

A curated list of amazingly awesome PHP libraries, resources and shiny things.

Freshβ˜… 33k87 entriesPushed 2 days ago