1. Conduid
  2. Search
  3. PentestToolbox
MCP server · Search

PentestToolbox

by · github.com/abhishek0412/PentestToolbox

Electric Blue MCP provides a Dockerized MCP server exposing a curated set of open‑source recon and application security tools (nmap, nikto, sqlmap, dirb, dnsrecon, wpscan, searchsploit, grype, syft). All tool calls are sanitized, time‑capped, output‑truncated.SBOM and vulnerability scanning to support supply chain visibility.

Unclaimed last commit a year ago blue-team-reconcompliance-recon-automationdefensive-recon-aisbom-vulnerability-automationsecure-tool-wrappers
InstallView source
34Low

Scored a month ago · breakdown

About PentestToolbox

PentestToolbox is an MCP server published by abhishek0412 in the Search category: electric Blue MCP provides a Dockerized MCP server exposing a curated set of open‑source recon and application security tools (nmap, nikto, sqlmap, dirb, dnsrecon, wpscan, searchsploit, grype, syft). All tool calls are sanitized, time‑capped, output‑truncated.SBOM and vulnerability scanning to support supply chain visibility.

The repository has 1 stars and 0 forks, with the last commit a year ago. Six months or more without a commit doesn't mean the server is broken, but check the open issues before depending on it in production.

Install

From source
git clone https://github.com/abhishek0412/PentestToolbox

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (9)

dirb_scanDirectory brute force (auto-normalizes file URLs to directories)

Parameters not published.

dnsrecon_scanDNS enumeration (limited flags)

Parameters not published.

grype_scanVulnerability scan (packages, OS, libs)

Parameters not published.

nikto_scanWeb server scan

Parameters not published.

nmap_scanBasic nmap scanning

Parameters not published.

search_exploitSearch exploitdb

Parameters not published.

sqlmap_scanSQL injection testing

Parameters not published.

syft_scanSBOM generation

Parameters not published.

wpscan_siteWordPress scan

Parameters not published.

Ask AI

✦

Ask AI about PentestToolbox

Powered by Claude · Grounded in docs

I know everything about PentestToolbox. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About PentestToolbox

How do I install PentestToolbox?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is PentestToolbox safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is PentestToolbox still maintained?

The last commit was a year ago. That's long enough that you should check whether the maintainer is responding to issues before depending on it.