- Conduid
- Marketplace
- #bugbounty
MCP servers tagged bugbounty
28 live MCP servers tagged "bugbounty", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with bugbounty.
Burp AI Agent
Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more
Awesome Hacking Lists
A curated collection of top-tier penetration testing tools and productivity utilities across multiple domains. Join us to explore, contribute, and enhance your hacking toolkit!
Vulnerable MCP Servers Lab
A collection of servers which are deliberately vulnerable to learn Pentesting MCP Servers.
Burp MCP Agents
Practical setup guides and helpers to connect Burp Suite MCP Server to multiple AI backends (Codex, Gemini, Ollama, ...).
Httpx
httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
Dalfox
🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.
Awesome MCP
🚀 Discover and explore a curated list of MCP servers, tools, and resources for AI assistants, enhancing your development and productivity.
Jwt Hack
JSON Web Token Hack Toolkit
Airecon
AIRecon is an autonomous cybersecurity agent that combines a self-hosted Large Language Model (Ollama) with a Kali Linux Docker sandbox and a Textual TUI. It is designed to automa…
Externalattacker MCP
A modular external attack surface mapping tool integrating tools for automated reconnaissance and bug bounty workflows.
Bug Bounties
⚔️ A compiled list of companies who have active programs for responsible disclosure. MCP-enabled.
ARL Next
🚀 自动化资产侦察与漏洞监控平台 (ARL-Next)。重构自经典 ARL，全面升级 Puppeteer + Nuclei 引擎，打通「天眼查/ICP ➔ 资产发现 ➔ 漏洞扫描 ➔ 威胁情报追踪」安全闭环。支持 Docker 极简部署，AI 二开友好。
Scan Spring GO
Spring 全家桶漏洞扫描工具 | 17 个漏洞模块 + MCP 服务端（AI 自动化渗透）| Go 实现
Bug Bounty Agents
AI-Powered Agents for Bub-Bounty Pentesting and Red-Teaming purposes
Gori
A fast, keyboard-driven HTTP intercepting proxy and hacking & pentesting toolkit for the terminal.
Reap
reconnaissance for agent attack surfaces
Jsowl
JsOwl —— Go 编写的 Web 安全信息收集利器。集 JavaScript 信息收集、API 端点提取、敏感信息扫描、攻击面梳理 于一体，同时提供 CLI 工具与 Go 库。内置 direct / browser / auto 三种采集模式，兼容 HaE 规则，支持登录态扫描、运行时交互、AI 辅助分析与 MCP Server，输出 JSON 与交…
Bugsecure MCP
MCP server for the BugSecure bug bounty platform => browse programmes, work on your reports and triage
Bb Huge
bb-huge 🤗 , Personal bug bounty findings hub and bug bounty orchestration for multiple agents
Nuclei API
Nuclei API is an advanced, AI-augmented platform for automated vulnerability scanning and template management, built around Nuclei.
Binoculo MCP
Banner grabbing with LLM (MCP Server)
Pentos
Wissensgetriebener, lokaler Pentest-Workspace (CLI) für CTF, Bug Bounty & autorisierte Tests – geführte Recon, Findings/Loot/Reports, Web-Dashboard, lokale KI-Unterstützung & MCP-…
Openssh Poc Expl
zero day exploit to get remote access to any server running openssh (unpatched)
Burpsuite MCP Vscode
Model Context Protocol (MCP) integration for Burp Suite and VS Code. A proxy for context sharing, AI-assisted analysis, and streamlined security workflows
Bugbounty.sa
Unofficial CLI/MCP server for bugbounty.sa (reports, programs, scope,flow-up) ⚙
Yeswehack MCP
MCP server for YesWeHack. Let AI agents browse programs, query scopes, filter bounties, authenticate with 2FA, and automate bug bounty workflows.
AntiPrivEsc
Detect privilege escalation and suspicious processes with process monitoring, file tracking, and SQLite logging for security teams
Burp MCP Me262
MCP server for Burp Suite Pro — active scans, native fuzzer, Collaborator, reporting, scope-guarded. Works with Claude Code, Cursor, Cline, Windsurf & any MCP client.