MCP servers and skills: search, filter by where they run, and compare.
AI-Pentesting-Tool is an educational workflow for using an AI agent with Kali tooling through MCP (Model Context Protocol) in VS Code insiders for white-box and black-box pentesting..
MCPLink only★ 7
A comprehensive AI-powered penetration testing system using the Model Context Protocol (MCP), Docker, and Kali Linux tools.
MCPLink onlyFew stars
A practical, community-driven checklist for pentesting MCP servers. Covers traffic analysis, tool-call behavior, namespace abuse, auth flows, and remote server risks. Maintained by Appsecco and licens
SkillCC-BY-4.0★ 42No key
🔐 50+ MCP Security Servers for AI-Powered Pentesting | Integrate Nmap, Burp Suite, Nuclei, Shodan, BloodHound, Semgrep, Trivy | Model Context Protocol for Cybersecurity
SkillMIT★ 34No key
Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.
PythonMIT★ 1.8kNo key
Open-source, self-hosted AI penetration testing framework: maps your attack surface into a graph, autonomously exploits it from a Kali sandbox with human approval gates, and opens PRs that fix what it
SkillMIT★ 3.2kNo key
Open-source AI penetration testing tool to find and fix app vulnerabilities (mirror of usestrix/strix, Apache-2.0)
SkillApache-2.0★ 1Few starsNo key
AI-powered security agent that scans codebases and pull requests for vulnerabilities in CI/CD pipelines.
SkillApache-2.0★ 4Few starsNo key
Claude Code skill for autonomous AI pentesting with Keygraph Shannon
SkillLink only★ 2Few stars
Open-source AI cybersecurity agent/harness
SkillApache-2.0★ 4Few starsNo key
BugWolf — all-round bug bounty hunting skill for Claude Code: parallelized agents for smart contract audits (EVM, Move, Solana, TRON), web/API security, CI/CD attacks, LLM/agentic AI security, and sub
SkillApache-2.0★ 1Few starsNo key
Autonomous AI penetration testing agent. Plans attack path, executes multi-phase pentest (recon→scan→exploit→report), scores with CVSS 3.1. Pure Python stdlib. Zero extra dependencies.
SkillMIT★ 3Few starsNo key
Stdlib-only Python MCP server with three security tools: CVE lookup via OSV.dev, host exposure via Shodan InternetDB, and orchestration of a locally installed Nuclei scanner. No exploit code bundled;
PythonMITFew starsNo key
Autonomous multi-agent AI penetration-testing engine: a governed tool sandbox, an immutable evidence-and-validation gate, and a reproducible security-agent evaluation environment.
SkillMIT★ 8No key
A network diagnostic chatbot that also works offline. It has over 50 built-in tools to provide troubleshooting and analysis of local and remote networks. Chat interactively from the command line or in
SkillMIT★ 5No key
Bootable Kali Linux USB with AI-powered pentesting: OpenCode, CLI Agent, Kali MCP (35+ tools), and Shannon Plugin (autonomous pentesting with 600+ Docker tools). Boot anywhere, pentest everything, lea
SkillMIT★ 16No key
An experimental lab exploring LLM-based penetration testing using Kali Linux, Metasploit RPC, and Model Context Protocol (MCP).
MCPLink onlyFew stars
The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation improves the next.
GoApache-2.0★ 8.0kNo key
HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug boun
SkillMIT★ 13kNo key
Open-source, self-hosted web pentesting suite with agentic scanning, analyst tools, API testing, model checkpoints and MCP integrations.
SkillApache-2.0★ 357No key
Pentesting-Automation Engineer tasked with building an AI-driven platform that orchestrates containerised security tools via the Model Context Protocol (MCP) to deliver fully automated, end-to-end pen
SkillMITFew starsNo key
Open-source autonomous AI penetration testing. 50 specialist agents across web, API, cloud, Active Directory, Kubernetes, CI/CD and AI/LLM (OWASP LLM Top 10). Runs on a local LLM behind a Privacy Gate
SkillGPL-3.0★ 1.1kNo key
Who stands behind it
