- Conduid
- Marketplace
- #penetration-testing
MCP servers tagged penetration-testing
106 live MCP servers tagged "penetration-testing", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with penetration-testing.
Browserbruter
BrowserBruter is a powerful web form fuzzing automation tool designed for web security professionals and penetration testers. This Python-based tool leverages Selenium and Seleniu…
Anthropic Cybersecurity Skills
Accelerate AI security workflows with 817 open-source skills across 29 domains for six leading agent frameworks.
Redamon
An AI-powered agentic red team framework that automates offensive security operations, from reconnaissance to exploitation to post-exploitation, with zero human intervention.
Pentest Swarm AI
Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning — supports bug bounty,…
Pentesting MCP Servers Checklist
A practical, community-driven checklist for pentesting MCP servers. Covers traffic analysis, tool-call behavior, namespace abuse, auth flows, and remote server risks. Maintained b…
Cybermes
Zero-Go Model Context Protocol (MCP) Server for Cybermes Autonomous Security & Diagnostic Framework
Pentest MCP Server
MCP server for penetration testing
LuaN1aoAgent
LuaN1aoAgent is a cognitive-driven AI hacker. It is a fully autonomous AI penetration testing agent powered by DeepSeek V3.2. Using dual-graph reasoning, LuaN1ao achieves a succes…
Reconmap
Reconmap is a collaboration-first security operations platform for infosec teams and MSSPs, enabling end‑to‑end engagement management, from reconnaissance through execution and re…
Dark Moon
Autonomous AI pentesting engine, continuous offensive security across web, cloud, AD & Kubernetes. Agentic reasoning + real exploit execution deliver proof-based vulnerabilities.…
Airecon
AIRecon is an autonomous cybersecurity agent that combines a self-hosted Large Language Model (Ollama) with a Kali Linux Docker sandbox and a Textual TUI. It is designed to automa…
Shodan Dorks
Shodan Dorks
CyberStrike
AI-powered offensive security agent. Autonomous pentesting with 13+ specialized agents, 120+ OWASP test cases, 15+ LLM providers, and Bolt remote tool servers. Your AI red team.
Red Run
Offensive security toolkit for Claude Code
Claude C2
Utilizng an MCP Server to communicate with your C2
Antares
Antares: a self-hosted AI pentest agent and assistant in one binary. Authorized penetration testing with security specialists, 7,000+ procedures and reports, plus files, shell, a…
0
A cybersecurity harness for full-stack LLM-driven penetration testing. Find and fix vulnerabilities autonomously, 24/7. [RESEARCH PREVIEW]
Claude Active Directory
AI agent harness for Active Directory offensive security — 8 skill domains, 13 slash commands, 7 agents, ROE-safe orchestration. Part of DoOS by Evaluris Solutions Labs.
0sec
[RESEARCH PREVIEW] The open & extensible cybersecurity harness - by the Swiss Applied AI Cybersecurity Research Lab.
Violin
Supervised, Hermes-native penetration testing profile with 35 routed playbooks, guarded target execution, persistent engagement state, evidence-backed findings, and release-gated…
AutoWIFI
Wireless penetration testing framework. Automates WPA/WPA2/WEP/WPS attacks - recon to exploitation in one command. aircrack-ng + hashcat + PMKID.
Ctf MCP
MCP Server for CTF challenges - 126 tools for Web/Crypto/Pwn | CTF 挑战 MCP 服务器 - Web/密码学/二进制利用工具集
Awesome Security Agent Harnesses
AI agents for pentesting, code audit, fuzzing, vulnerability discovery, and reverse engineering — harnesses, sandboxes, security MCP servers, benchmarks, and evals.
cli
Professional WAF security testing toolkit
Aircrack MCP
MCP server that wraps aircrack-ng, enabling AI assistants to run and automate WiFi security assessments (scanning, handshake capture, cracking) for authorized penetration testing.
Tengu
AI-powered penetration testing MCP server
Signature Cloaking
This research introduces MCP Signature Cloaking - a novel backdoor technique that allows attackers to exploit hidden parameters in MCP servers, concealing malicious behavior behin…
Pentester MCP
Elevate your AI assistants (like Claude & Cursor) into autonomous cybersecurity experts. Pentester-MCP integrates 200+ pentesting tools via the Model Context Protocol (MCP) using…
Pentest AI
The most autonomous pentesting AI on the market. MCP server + Python agents with 150+ security tools, exploit chaining, and PoC validation.
Client And Proxy
A universal MCP client with proxying feature to interact with MCP Servers which support STDIO transport.
RedTeam Agent
RedTeam-MCP: AI-Powered Autonomous Red Team Framework via Model Context Protocol. AI红队与内网渗透自动化框架，支持 gogo, fscan, httpx, nuclei, impacket, playwright 等 15+ 渗透工具，让 LLM 直接化身安全审计黑客。
Js Recon
JS Enumeration & SAST
Tcpk
Thick client penetration testing and MSIX security audit toolkit for Windows. Audits .NET, Electron and native binaries: static and runtime checks, IL-verified findings, computed…
SpectreWeb AI
Self-Learning AI for Manual Web Penetration Testing
Ghidra5
🎯 Advanced GPT-5 Powered Ghidra Reverse Engineering MCP Server | 7 AI-Enhanced Analysis Tools | Professional Binary Analysis | TechSquad Inc. Proprietary Software
VirusTotal Threat Analysis
VirusTotal MCP Server是一个让AI结合威胁情报进行深入分析、基于 Model Context Protocol (MCP) 开发的 VirusTotal API 调用工具，为用户提供文件、IP地址、域名和URL的威胁情报查询功能，并将得到的数据喂给AI进行二次分析，提升威胁情报分析能力并给予处置建议。
Burp MCP Security Analysis Toolkit
Burp MCP Security Analysis Toolkit
Hackmyagent
Metasploit for AI agents: scan, attack, and fix AI agents and MCP servers. Open source security toolkit.
Bugbountyrules
Behavioral-discipline skill turning an AI agent into a methodical, non-robotic bug-bounty & pentest hunter - 42 always-on rules: scope, coverage, no false positives, never quits e…
BrokenMCP
BrokenMCP is a vulnerable implementation of the Model Context Protocol (MCP) for educational purposes.
Kali Opencode Usb
Bootable Kali Linux USB with AI-powered pentesting: OpenCode, CLI Agent, Kali MCP (35+ tools), and Shannon Plugin (autonomous pentesting with 600+ Docker tools). Boot anywhere, pe…
Mcpstrike
MCP server + Ollama-driven autonomous penetration testing client. Connects LLMs to security tools (nmap, nikto, sqlmap, dalfox…) via Model Context Protocol with session management…
Claude Pentest Skills
AI-powered web application penetration testing skills with Claude Code
Firebreak
Security MCP server that turns your AI into a penetration tester. 20 tools, 100 best practice guides, 47 vulnerability patterns. Connect to Claude, Cursor, or any MCP client.
ROEGATE
The first reference monitor for autonomous AI penetration testing agents. Mandatory enforcement, not prompt-based guardrails. Patent pending.
Supabase Security MCP
MCP server for Supabase security: audit, apply fixes, re-audit from any MCP client (Claude Code, Cursor, Cline).
BadHost CVE 2026 48710 Exploit
Detection scanner for CVE-2026-48710 - Host-header auth bypass in Starlette/FastAPI
Hugin
A power tool for web security testing — scanner, repeater, intruder, and AI agent in one Rust binary. No accounts, no telemetry, no cloud.
Yorishiro Proxy
AI-native MITM proxy — MCP server for traffic interception, recording & replay
Thru Burp
A cross-platform desktop UI MCP client specifically for proxying MCP traffic through Burp Suite Proxy. Useful for recon and fuzzing when pentesting a remote MCP HTTP server.