- Conduid
- Marketplace
- #vulnerability-research
MCP servers tagged vulnerability-research
13 live MCP servers tagged "vulnerability-research", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with vulnerability-research.
Vulhunt
Vulnerability detection framework by Binarly's REsearch team
Open Reverselab
Open-source reverse engineering lab: 197-article knowledge base + MCP tools + CTF/APK/PE automation toolchain. Agent-native. Note:由于场景原因，目前有让几乎所有AI都会越狱的bug，暂时不修😉
Windbg MCP
C# MCP server for kernel & user-mode Windows debugging — DbgEng COM, KDNET, Frida, dbgsrv, TTD, and integrated VM control. 29 tools for LLM agents.
Security Agent Skills
Security-testing methodology as portable, tool-agnostic agent skills for Claude Code and any agent runtime: white-box bug hunting, AI-agent and LLM red-teaming, supply-chain risk,…
Remote Oauth Security
Seven evidence-bounded OAuth trust-boundary security advisories for geelen/mcp-remote, reviewed through 0.1.38.
Winbox
Isolated Windows vulnerability-research platform for Kali and AI agents: VM automation, hypervisor debugging, driver/IPC testing, containment, and MCP.
AI Infra Security
Vulnerability research on AI infrastructure: LLM gateways, MCP transports, and model-serving stacks. Root cause, reproduction, and detection.
Tlad Semgrep
Semgrep rules to detect Transport-Layer Auth Divergence (TLAD) in MCP servers — auth applied to some transports but not others.
Win11 Forge
Standalone Windows-CVE lab harness. Builds a Win11 LTSC 24H2 gold image once, spawns KVM or VMware kernel-debug VM pairs in minutes with live MCP endpoints for AI-driven analysis.
Decepticon Ghidra MCP
Full-featured Ghidra MCP - P-code, BSim, Version Tracking, emulation. Built for agentic 0-day discovery.
GDB AI
Stateful GNU GDB interface for AI agents: MCP and JSON-RPC APIs, Python/TypeScript SDKs, and Linux user-space and kernel debugging.
Damn Vulnerable Agent Asset Corpus
Damn Vulnerable Agent Asset Corpus: benchmark fixtures for agent-asset scanners and AAC release assurance.
Security Advisories
Upstream security advisories, vulnerability disclosures, and architectural audits for open-source AI infrastructure