Open Source Python HTTP Servers

Certbot is a fully-featured, easy-to-use, extensible client for the Let's Encrypt CA. It fetches a digital certificate from Let’s Encrypt, an open certificate authority launched by the EFF, Mozilla, and others. This certificate then lets browsers verify the identity of web servers and ensures secure communication over the Web. Obtaining and maintaining a certificate is usually such a hassle, but with Certbot and Let’s Encrypt it becomes automated and hassle-free. With just a few simple commands, you can turn on and manage HTTPS. Certbot runs directly on the web server, so make sure to check with your hosting provider first if you are able to use Certbot.

XX-Net is an easy-to-use, anti-censorship web proxy tool from China. It includes GAE_proxy and X-Tunnel, with support for multiple platforms.

PyLoris is a scriptable tool for testing a server's vulnerability to connection exhaustion denial of service (DoS) attacks. PyLoris can utilize SOCKS proxies and SSL connections, and can target protocols such as HTTP, FTP, SMTP, IMAP, and Telnet.

Uvicorn is an ASGI web server implementation for Python. Until recently Python has lacked a minimal low-level server/application interface for async frameworks. The ASGI specification fills this gap, and means we're now able to start building a common set of tooling usable across all async frameworks. Uvicorn currently supports HTTP/1.1 and WebSockets.

urllib3 is a powerful, user-friendly HTTP client for Python. Much of the Python ecosystem already uses urllib3 and you should too. Thread safety, connection pooling. Client-side TLS/SSL verification. File uploads with multipart encoding. Helpers for retrying requests and dealing with HTTP redirects. Support for gzip, deflate, brotli, and zstd encoding. Proxy support for HTTP and SOCKS. 100% test coverage. Professional support for urllib3 is available as part of the Tidelift Subscription. Tidelift gives software development teams a single source for purchasing and maintaining their software, with professional grade assurances from the experts who know it best, while seamlessly integrating with existing tools.

Build fast, run fast with Sanic! Sanic is a Python 3.6+ web server and web framework designed to go fast. It provides a way to get a highly performant HTTP server up and running fast, while also making it easy to build, expand, and eventually scale. Sanic aspires to be as simple as possible while delivering the performance that you require. It allows the usage of the async/await syntax added in Python 3.5, so your code is guaranteed to be non-blocking and speedy. It's also ASGI compliant, so it's possible to deploy with an alternative ASGI webserver.

Automatically mock your HTTP interactions to simplify and speed up testing. VCR.py simplifies and speeds up tests that make HTTP requests. The first time you run code that is inside a VCR.py context manager or decorated function, VCR.py records all HTTP interactions that take place through the libraries it supports and serializes and writes them to a flat file (in yaml format by default). This flat file is called a cassette. When the relevant piece of code is executed again, VCR.py will read the serialized requests and responses from the aforementioned cassette file, and intercept any HTTP requests that it recognizes from the original test run and return the responses that corresponded to those requests. This means that the requests will not actually result in HTTP traffic, which confers several benefits including:

w3af, is a Web Application Attack and Audit Framework. The w3af core and it's plugins are fully written in python. The project has more than 130 plugins, which check for SQL injection, cross site scripting (xss), local and remote file inclusion and much more. This project has been migrated to github! See details in our project site: http://w3af.org/

edna is a small, Python-based HTTP server that dynamically constructs web pages to navigate, select, and stream MP3s from a large MP3 library.

This has a Python ICAP (Internet Content Adaptation Protocol) server and IRML parser. Using this, a web proxy can do rule-based adaptation of content before delivery to clients. Has a Python proxylet API and squid-icap-client code too.

Data server for user intelligent agents. Written in Python, using XML-RPC as client/server communication and RDBMS as storage.

ApacheConsole is a Python application that aims at providing a GUI ŕ la MMC for IIS to manage the Apache web server on both Linux/Unix and Windows platforms. Additional features include configuration of remote hosts via specific agents.

Aquarium is a framework for creating highly-dynamic, custom Web application in Python. It offers convenient libraries, tight integration with Cheetah, adaptors for various Web environments, and a convenient approach to Web development.

This is a apache v2.0 authentication module. Based on html form authentication and cookie authentication session. Cookie session are stored in memcache deamon. Can be used has an simple "Single Signe-On" (SSO). All the code source and the bug tracking has migrated to github: https://github.com/ZenProjects/Apache-Authmemcookie-Module All the documentation are here: https://zenprojects.github.io/Apache-Authmemcookie-Module/

Using Socks4/5 or http proxies to make a multithreading Http-flood/Https-flood (cc) attack.

This is a proof of concept for CVE-2021-31166 ("HTTP Protocol Stack Remote Code Execution Vulnerability"), a use-after-free dereference in http.sys patched by Microsoft in May 2021. The bug itself happens in http!UlpParseContentCoding where the function has a local LIST_ENTRY and appends an item to it. When it's done, it moves it into the Request structure; but it doesn't NULL out the local list. The issue with that is that an attacker can trigger a code-path that frees every entry of the local list leaving them dangling in the Request object.

A pure HTML implementation of VNC, using the HTML 5 canvas tag and JavaScript as a client and an RFB to HTTP proxy served up by Python. Requires Python and Python Imaging Library to be installed on the server.

CheesyPy - a library for creating websites somewhat like CherryPy, featuring a builtin web-server (HTTPLib) with session management (not using Cookies) and a plugin architecture (PageLib) for webpages.

CoyoteMonitoring is a Zope-based web interface for managing NetFlow Collectors, data, and graphs. Inspired by Cacti's capabilities with SNMP, CoyoteMonitoring aims to provide rich and useful features for organizations requiring NetFlow management.

Solving genetic algorithms in a distributed processing system. Developed in python with sockets.

Jakarta Tomcat - Java + Python => Lean, Fast, and Mean. As this project is in the inital planning phase, any feedback you provide will be greatly appreciated, and will probably have a significant impact on the final product.

JyWeb is a lightweight webserver written in Jython. It also uses Jython which is in the archives for your convenience and in the SVN in the release folder so you can build your own jars.

Python web development framework with a focus on efficiency/speed and extensibility, with a large library of functions to aid in the development of modern web applications.

Lemon is a suite of pure Python modules for rapidly developing web applications. Includes: database, webserver, auth & session management, form and templating tools, docs and examples. Flexible enough to use on its own or with other solutions like Apache.

Tools developed by the Library of Congress and their partners in the National Digital Information Infrastructure and Preservation Program (NDIIPP) for the purpose of validation and transfer of data that conforms to the BagIt specification. This project has been moved to https://github.com/LibraryOfCongress