- Conduid
- Marketplace
- #offensive-security
MCP servers tagged offensive-security
73 live MCP servers tagged "offensive-security", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with offensive-security.
Litterbox
A self-hosted sandbox for red teams to test payloads against modern detection before deployment. MCP integration lets an LLM agent drive analysis end to end.
Pentest Swarm AI
Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning — supports bug bounty,…
Cybermes
Zero-Go Model Context Protocol (MCP) Server for Cybermes Autonomous Security & Diagnostic Framework
Fuzzforge AI
AI-powered workflow automation and AI Agents platform for AppSec, Fuzzing & Offensive Security. Automate vulnerability discovery with intelligent fuzzing, AI-driven analysis, and…
Secpipe
MCP server for AI-driven security pipelines
Dark Moon
Autonomous AI pentesting engine, continuous offensive security across web, cloud, AD & Kubernetes. Agentic reasoning + real exploit execution deliver proof-based vulnerabilities.…
CyberStrike
AI-powered offensive security agent. Autonomous pentesting with 13+ specialized agents, 120+ OWASP test cases, 15+ LLM providers, and Bolt remote tool servers. Your AI red team.
Mantishack
Mantis Hack
AgentHound
Offensive security framework for AI agent infrastructure - recon, credential looting, model exfiltration, poisoning, and attack-path analysis across MCP, A2A, gateways, and AI ser…
Red Run
Offensive security toolkit for Claude Code
Claude C2
Utilizng an MCP Server to communicate with your C2
Antares
Antares: a self-hosted AI pentest agent and assistant in one binary. Authorized penetration testing with security specialists, 7,000+ procedures and reports, plus files, shell, a…
Cerno
TUI for triaging Nessus findings: import .nessus into SQLite, launch nmap/NetExec against affected hosts, track review progress across scans, and drive it all from an MCP client.
Claude Active Directory
AI agent harness for Active Directory offensive security — 8 skill domains, 13 slash commands, 7 agents, ROE-safe orchestration. Part of DoOS by Evaluris Solutions Labs.
Hacker Bob
A local MCP runtime that attacks what you own and only reports what it proved. 17 CVEs across 9 projects came out of this repo. Install: npx -y hacker-bob@latest install /path/to/…
Bughunter AI
Autonomous Bug Bounty Hunting Framework powered by Claude Code. 20 AI agents, state-machine orchestration, Burp Suite MCP, credential vault, LLM security track. Type 'hunt target.…
Awesome Security Agent Harnesses
AI agents for pentesting, code audit, fuzzing, vulnerability discovery, and reverse engineering — harnesses, sandboxes, security MCP servers, benchmarks, and evals.
Aptl
SOC-in-a-Box for AI purple teaming
Opencrow
Agentic AI orchestration framework for offensive security and CTF work, with Codex-ready skills, typed MCP servers, workflow CLIs, and OpenCROW Constellation for multi-agent coord…
OpenCROW
Agentic AI orchestration framework for offensive security and CTF work, with Codex-ready skills, typed MCP servers, workflow CLIs, and OpenCROW Constellation for multi-agent coord…
Tengu
AI-powered penetration testing MCP server
Pentest AI
The most autonomous pentesting AI on the market. MCP server + Python agents with 150+ security tools, exploit chaining, and PoC validation.
RedTeam Agent
RedTeam-MCP: AI-Powered Autonomous Red Team Framework via Model Context Protocol. AI红队与内网渗透自动化框架，支持 gogo, fscan, httpx, nuclei, impacket, playwright 等 15+ 渗透工具，让 LLM 直接化身安全审计黑客。
WonderSuite AI Bug Bounty
AI-Powered Offensive Security Research Engine - desktop-native security testing platform with native MCP integration. 90 tools, MITM proxy, stealth browser, autonomous AI agent. B…
Offsec AI
offsec-ai is a Python library and CLI that combines classic network reconnaissance with modern AI/LLM security testing.
C2detect
C2 server fingerprinter — Cobalt Strike, Sliver, Mythic, Havoc, Brute Ratel
Tcpk
Thick client penetration testing and MSIX security audit toolkit for Windows. Audits .NET, Electron and native binaries: static and runtime checks, IL-verified findings, computed…
Bugbountyrules
Behavioral-discipline skill turning an AI agent into a methodical, non-robotic bug-bounty & pentest hunter - 42 always-on rules: scope, coverage, no false positives, never quits e…
Awesome Offensive MCP
A curated list of Offensive Security MCP Servers for Red Teaming & Pentesting.
Cobalt Docker
Builds and runs Cobalt Strike 4.12 in Docker with automatic REST API startup. Production-ready, one-command deploy.
Claude C2
AI-Powered Command & Control Framework using Claude's Model Context Protocol (MCP)
Credence
Exposure intelligence for the AI-infrastructure layer — finds and weighs leaked credentials, MCP/agent configs, git-metadata secrets, and supply-chain risk, and tells you which ex…
Blitzstrike
⚡ Blitz Strike — a universal MCP penetration-testing toolbelt. Structured methodology: reconnaissance & attack-surface mapping, source-to-sink analysis, and live validation. 57 es…
Winbox
Isolated Windows vulnerability-research platform for Kali and AI agents: VM automation, hypervisor debugging, driver/IPC testing, containment, and MCP.
Jcyber
Agent-driven bug bounty / pentest framework: one gated chain over five systems (Caido, HexStrike, Jev, Memgraph, TencentDB, Prometheus)
Suvari
AI-powered black-box web pentester. Give the URL, Suvari handles the rest.
Arsenal
Plugin-First Offensive Security & Reverse Engineering Harness for Oh My Pi (OMP)
Kestrel
Error tracking built for AI agents, not dashboards. Single Go binary, SQLite-only, MCP-native. < 20 MB. 为 AI agent 而生的错误监控。单 Go 二进制 + SQLite，内置 MCP，< 20 MB。 WIP
Mcpbait
Red teaming framework that proves whether an MCP-speaking agent can be hijacked by a malicious server
Crackq
Self-hosted password cracking queue — multi-user hashcat with audit log
RedPhish
Free, open-source evilginx-based tool for security researchers and authorized red teams — phishing simulation & security testing.
AntiStrike7.0
Antistrike 7.0 — Advanced AI-powered penetration testing platform with 99 attack modules, MCP integration, and web dashboard
Kali MCP
Kali Linux container exposed to AI agents via MCP, behind a gateway with a network kill-switch
Prismsec
Secure, modular MCP server wrapping nmap, nuclei, gobuster, subfinder, httpx, nikto, sqlmap for AI-powered pentesting
Burp MCP
Burp Suite Professional MCP server - 61 tools to drive Burp from an AI agent (Claude Code) for authorized security testing.
CyberChef MCP
[CyberChef-MCP] Model Context Protocol Server for CyberChef ... exposing GCHQ's "Cyber Swiss Army Knife" as 463+ executable AI agent tools spanning encryption, encoding, compressi…
Ovogo
Ovogo: Autonomous Red Team Coordination Engine. 基于 AI Agent 的自动化渗透测试与红队协同引擎（专为靶场环境设计），支持 MITRE ATT&CK 攻击链生成、多节点并行利用与 Flag 自动化收集。
Cybersec Toolkit
580+ cybersecurity tools, one command. Modular bash installer for Linux & Termux with 14 profiles, 18 modules, and an MCP server for AI-assisted ethical hacking.
Frameseven
Offensive web security scanner — OWASP Top 10 · MCP server · CLI · Go
Bearstrike AI
🐻 BearStrike AI: High-Signal Pentesting Console (MCP-First, Model-Agnostic). Build fast, low-noise security workflows with queue-first execution, skills-aware planning, and 150+ i…