- Conduid
- Marketplace
- #pentest
MCP servers tagged pentest
57 live MCP servers tagged "pentest", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with pentest.
Hexstrike AI Community Edition
HexStrike AI Community Edition - Cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with r…
LuaN1aoAgent
LuaN1aoAgent is a cognitive-driven AI hacker. It is a fully autonomous AI penetration testing agent powered by DeepSeek V3.2. Using dual-graph reasoning, LuaN1ao achieves a succes…
AI ML Free Resources For Security And Prompt Injection
AI/ML Pentesting Roadmap for Beginners
CyberStrike
AI-powered offensive security agent. Autonomous pentesting with 13+ specialized agents, 120+ OWASP test cases, 15+ LLM providers, and Bolt remote tool servers. Your AI red team.
Pentest Service Enumeration
Suggests programs to run against services found during the enumeration phase of a Pentest
Scan Spring GO
Spring 全家桶漏洞扫描工具 | 17 个漏洞模块 + MCP 服务端（AI 自动化渗透）| Go 实现
Antares
Antares: a self-hosted AI pentest agent and assistant in one binary. Authorized penetration testing with security specialists, 7,000+ procedures and reports, plus files, shell, a…
Nyxstrike
AI Powered penetration testing Platform for offensive security research
Cfuzz
Command line fuzzer and bruteforcer 🌪 wfuzz for command
Violin
Supervised, Hermes-native penetration testing profile with 35 routed playbooks, guarded target execution, persistent engagement state, evidence-backed findings, and release-gated…
Sectinel
Open-source security arsenal for AI coding agents: 784 cybersecurity skills, scanner integrations, and a security MCP for Claude Code, Cursor, opencode, Gemini CLI, Cline, and any…
Jsowl
JsOwl —— Go 编写的 Web 安全信息收集利器。集 JavaScript 信息收集、API 端点提取、敏感信息扫描、攻击面梳理 于一体，同时提供 CLI 工具与 Go 库。内置 direct / browser / auto 三种采集模式，兼容 HaE 规则，支持登录态扫描、运行时交互、AI 辅助分析与 MCP Server，输出 JSON 与交…
Nuclei Server
A Nuclei security scanning server based on MCP (Model Control Protocol), providing convenient vulnerability scanning services.一个基于 MCP (Model Control Protocol) 的 Nuclei 安全扫描服务器，提供…
C2detect
C2 server fingerprinter — Cobalt Strike, Sliver, Mythic, Havoc, Brute Ratel
Cloud Audit MCP
Cloud security audit tools for AI agents — AWS, Azure, GCP misconfiguration detection via MCP. 38 tools, 60+ checks. The agent finds vulns, not you.
SpectreWeb AI
Self-Learning AI for Manual Web Penetration Testing
Luvv MCP
Luvv-MCP 是一个 AI 原生的前端安全分析引擎，接入 Claude Code 后，你说一句"帮我审计这个网站"，AI 就能自动完成技术栈识别（1.8 万条规则覆盖 CMS/框架/CDN/中间件）、泄露扫描（阿里云 AK、GitHub Token、Webhook、JWT 等 60+ 类敏感信息）、漏洞审计（XSS、开放重定向、CSRF、IDO…
Kali Opencode Usb
Bootable Kali Linux USB with AI-powered pentesting: OpenCode, CLI Agent, Kali MCP (35+ tools), and Shannon Plugin (autonomous pentesting with 600+ Docker tools). Boot anywhere, pe…
Cobalt Docker
Builds and runs Cobalt Strike 4.12 in Docker with automatic REST API startup. Production-ready, one-command deploy.
Karukia
KARUKIA MCP Server v3.0 — AI-powered development methodology with 26 tools, 19 skills, 1797+ checkpoints across 11 audit dimensions. Works with any AI platform via MCP protocol.
Saker
万物皆是插件，万物皆可自定义——基于DeepSeek Harness的安全测试工作台，提示词、工具、MCP、技能、知识库、WebShell均可模块化编排，覆盖渗透测试与代码审计。
Fetih
CTF, pentest ve OSINT için terminal tabanlı otonom yapay zeka ajanı. 20+ AI sağlayıcı, 900+ skill, Telegram/Discord gateway ve MCP CTF köprüsü.
AWS Security Agent Claude
AWS Security Agent for Claude Code, adapted from the Kiro power. Code scan, diff scan, threat model, pentest and findings remediation, in English and Portuguese.
Mobile Security MCP
Mobile app security analysis MCP server for Android APK and iOS IPA files
Blitzstrike
⚡ Blitz Strike — a universal MCP penetration-testing toolbelt. Structured methodology: reconnaissance & attack-surface mapping, source-to-sink analysis, and live validation. 57 es…
Winbox
Isolated Windows vulnerability-research platform for Kali and AI agents: VM automation, hypervisor debugging, driver/IPC testing, containment, and MCP.
Firelin
面向 AI Agent 的授权网络评估工具集 — TCP 端口扫描 / DNS 子域枚举 / 目录爆破 / HTTP 指纹识别，JSON in / JSON out 并附 MCP 服务（BIT 生态）
Suvari
AI-powered black-box web pentester. Give the URL, Suvari handles the rest.
Kestrel
Error tracking built for AI agents, not dashboards. Single Go binary, SQLite-only, MCP-native. < 20 MB. 为 AI agent 而生的错误监控。单 Go 二进制 + SQLite，内置 MCP，< 20 MB。 WIP
Burp Autopilot
Drive Burp Suite autonomously from the CLI — MCP-transport client + companion Montoya extension for scans & scripted fuzzing
CVE 2026 23744
PoC for CVE-2026-23744, demonstrating an unauthenticated RCE in MCPJam Inspector (<= 1.4.2).
Crackq
Self-hosted password cracking queue — multi-user hashcat with audit log
Aama
Efficient AI workbench designed to keep your mainframe landscape clean.
AntiStrike7.0
Antistrike 7.0 — Advanced AI-powered penetration testing platform with 99 attack modules, MCP integration, and web dashboard
Shannon On Claude Code
Shannon's 5-phase pentest pipeline running natively in Claude Code — no Docker, no Temporal, just /pentest https://github.com/KeygraphHQ/shannon
Frameseven
Offensive web security scanner — OWASP Top 10 · MCP server · CLI · Go
Pentest Autopilot Mcps
Professional MCP servers for penetration testing automation - SQLi, Exploit, Auth, Recon
APAIA
Android Pentest AI Assistant (APAIA) is an MCP server for Claude AI that was specifically created for Android pentesting/bug bounty purposes and aims to provide assistance for rec…
Hacking Cockpit Lite
Ringan, single-file MCP Server untuk pentesting dengan fitur rare: parallel recon, findings DB + compliance auto-tag (OWASP/PCI/CWE), intel correlation, attack-path analyzer, scan…
Burpsuite MCP Bridge
Burp Suite MCP bridge for traffic triage, replay, bounded interception, rewrite automation, and evidence export.
Mcpnuke
MCP red teaming & security scanner — enumerate, probe, and exploit Model Context Protocol servers
Flameshot MCP
Servidor MCP do Flameshot: seu agente tira o print e marca a evidencia sozinho - retangulo, seta, texto, blur e numeradores por chamada de ferramenta
Mr Robot
An ADR-driven security framework for Kali — a HackTheBox co-pilot orchestrating Hat-persona Claude agents across a shared arcade and a cross-engagement memory layer.
Sinon
AI agent pentest kit: a methodology and 54-probe corpus for prompt injection, tool abuse and over-permissioned agent actions. Verdicts rest on observed facts, not a judge model.
Autopentest MCP
Capability-gated MCP-style tool server for pentest agents: four gates (capability, scope, policy, run) the agent cannot exceed, plus a tamper-evident hash-chained audit of every c…
Dsh Pentest Bugtrace
BugTraceAI penetration-testing mode for deepseek-harness (dsh): pentester persona, runbook skill, and MCP bridge in one installable bundle
CHAI
Cyber Host Artificial Intelligence (C.H.A.I) - mcp server
Pentool MCP Server
MCP (stdio JSON-RPC) server for Pentool AI — local LLM assistant for pentest: pick checks, bypass WAF, find endpoints. Made for DrXOps/pentool.
Burpsuite For AI Agent
Two-way Burp Suite MCP bridge for AI agents — capture traffic, queue scan tasks, send findings back to Burp as Scanner issues or Repeater tabs. MCP server + Jython plugin.
F0 Pentest
Offensive-security tools, skills, and MCP servers for local AI agents — privacy-first, small-model-driven. Authorized pentest/red-team companion: 6 MCP servers (27 tools), all irr…