MCP servers and skills: search, filter by where they run, and compare.
MCP server for Exploit-DB — search public exploits and shellcode by CVE, platform, type, and tags.
SkillMIT★ 31No key
Real-time CVE, exploit, and vulnerability intelligence for AI assistants (350K+ CVEs, 115K+ PoCs)
PythonNo licenseFew starsNo key
Check dependencies against CISA's real Known Exploited Vulnerabilities feed.
Hosted by authorNo licenseFew starsNo key
Daily CVE priorities ranked by real exploitation (KEV+EPSS) for AI agents; free teaser, paid full
Hosted by authorNo licenseFew starsNo key
Check a dependency list against CISA's live Known Exploited Vulnerabilities catalog.
Hosted by authorNo licenseFew starsNo key
Offensive security toolkit for Claude Code covering red team, exploit dev, AD attacks, EDR bypass, mobile pentest
SkillMIT★ 392No key
Premium agentic endpoint for binary-exploitation-shield-mcp.
Hosted by authorNo licenseFew starsNo key
GitHub Actions security review for workflow exploitation vulnerabilities. Use when asked to "review GitHub Actions", "audit workflows", "check CI security", "GHA security", "workflow security review",
OfficialSkillApache-2.0★ 1.1k in collectionNo key
MCP server for Shodan — host/network recon, CVE and exploit lookup, InternetDB, and persistent alerts (34 tools).
SkillMIT★ 51No key
Official Python SDK for the Vulners vulnerability-intelligence API — search CVEs, exploits and advisories (CVSS/EPSS/KEV), audit software, Linux/Windows hosts and SBOMs, and stream the whole graph. Ty
PythonMIT★ 377No key
13 production MCP servers for US government data — safety recalls, cybersecurity vulnerabilities, disasters, finance, and more
Hosted by authorMIT★ 6No key
FIRST.org EPSS (Exploit Prediction Scoring System) MCP.
Hosted by authorMITFew starsNo key
CVE ingestion + enrichment pipeline with an MCP server for AI agents.
PythonMIT★ 38No key
Vulnerability-intelligence MCP server for AI agents: CVE lookups (NVD) and dependency-manifest audits (OSV). Keyless.
Hosted by authorMITFew starsNo key
Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, and more.
PythonApache-2.0★ 1.6kNo key
Use this skill when the user asks to "find CVEs for", "check if my domain is breached", "threat intel on", "OSINT on", "security news about", "attack surface of", "is this IP malicious", "what vulnera
OfficialSkillApache-2.0★ 275 in collectionNo key
Built for security professionals, developers, and DevSecOps teams who need reliable vulnerability intelligence integrated directly into their development workflow.
PythonMIT★ 9No key
Open-source, self-hosted AI penetration testing framework: maps your attack surface into a graph, autonomously exploits it from a Kali sandbox with human approval gates, and opens PRs that fix what it
SkillMIT★ 3.1kNo key
Blitz Strike — a universal MCP security-audit toolbelt. Reconnaissance at speed. Analysis in depth. Validation before report.
Node.jsMIT★ 509No key
Open-source autonomous AI penetration testing. 50 specialist agents across web, API, cloud, Active Directory, Kubernetes, CI/CD and AI/LLM (OWASP LLM Top 10). Runs on a local LLM behind a Privacy Gate
SkillGPL-3.0★ 1.0kNo key
Agent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more
SkillMIT★ 3.5kNo key
Who stands behind it
