- Conduid
- Marketplace
- #pentesting
MCP servers tagged pentesting
117 live MCP servers tagged "pentesting", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with pentesting.
Blhackbox
MCP-based autonomous pentesting framework — Claude, ChatGPT, or Ollama orchestrate 70+ Kali Linux tools (nmap, sqlmap, Metasploit & more) for recon, exploitation, and post-exploit…
Hacking Buddy MCP
Hacking Buddy MCP is a proof-of-concept MCP Server showing how AI can be leveraged in security operations/engagements.
MCPGoat
Deliberately vulnerable MCP server (aka MCP Goat) for security training — 26 challenges across 4 difficulty levels (incl. a secure reference), a victim-agent harness, and one-comm…
Strike
Active adversarial security scanner for Model Context Protocol (MCP) servers: runtime attacks, LLM-as-judge, and an adaptive agent.
Mcpsnare
Active security scanner that pentests MCP (Model Context Protocol) servers. Triggers and out-of-band-confirms real vulns (RCE, SSRF, path traversal, auth bypass) with graded confi…
Offsec Orchestrator
Governed agentic orchestration for reverse engineering and authorized pentesting — real MCP tool integration, scope/ROE gate, default-deny + human approval, tamper-evident audit.
AntiPrivEsc
Detect privilege escalation and suspicious processes with process monitoring, file tracking, and SQLite logging for security teams
Kali Ssh MCP
MCP server bridging Claude/any LLM client to a persistent Kali Linux VM over SSH — scope-gated nmap, gobuster, nuclei & nikto with structured JSON output and full audit logging.
Burp MCP Me262
MCP server for Burp Suite Pro — active scans, native fuzzer, Collaborator, reporting, scope-guarded. Works with Claude Code, Cursor, Cline, Windsurf & any MCP client.
Mobile Security Research Framework
Self-contained Mobile & IoT SAST/DAST/pentest toolkit: MobSF + Frida + objection + mitmproxy + rooted emulator, as a desktop app, CLI and MCP server.
Cyber Chef MCP
CyberChef Model Context Protocol (MCP) Server — 500+ data transformations, ciphers, hashing, JWT decoding, and payload deobfuscation for AI security & coding agents.
Flowki Claude Code Hardening
Deny-list config, documented attack patterns, and pentester checklist from a hands-on security review of Claude Code's permission architecture.
Hexstrike Docker MCP
Dockerized HexStrike AI on a linuxserver.io Kali base image, with a remote streamable-HTTP MCP server exposing 150+ offensive-security tools to MCP clients like Claude Code.
Ptes AI Agent ChatGpt
Framework de IA multiagente para evaluaciones de seguridad autorizadas bajo PTES, enfocado en OSINT, gestión de evidencias, validación, control de políticas y orquestación indepen…
Pentest MCP
NOT for educational purposes: An MCP server for professional penetration testers including STDIO/HTTP/SSE support, nmap, go/dirbuster, nikto, JtR, hashcat, wordlist building, and…
Security Lab
A hands-on lab of intentionally vulnerable MCP (Model Context Protocol) servers — think DVWA, but for AI-agent attack surface.
Kali MCP
Dockerized MCP server giving Claude Desktop a live Kali Linux terminal