MCP servers and skills: search, filter by where they run, and compare.
Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.
PythonMIT★ 1.8kNo key
Open-source AI penetration testing tool to find and fix app vulnerabilities (mirror of usestrix/strix, Apache-2.0)
SkillApache-2.0★ 1Few starsNo key
AI-powered security agent that scans codebases and pull requests for vulnerabilities in CI/CD pipelines.
SkillApache-2.0★ 4Few starsNo key
Open-source AI cybersecurity agent/harness
SkillApache-2.0★ 4Few starsNo key
Stdlib-only Python MCP server with three security tools: CVE lookup via OSV.dev, host exposure via Shodan InternetDB, and orchestration of a locally installed Nuclei scanner. No exploit code bundled;
PythonMITFew starsNo key
Autonomous multi-agent AI penetration-testing engine: a governed tool sandbox, an immutable evidence-and-validation gate, and a reproducible security-agent evaluation environment.
SkillMIT★ 8No key
LazyOwn RedTeam/APT Framework is the first RedTeam Framework with an AI-powered C&C, featuring rootkits to conceal campaigns, undetectable malleable implants compatible with Windows/Linux/Mac OSX, and
PythonAGPL-3.0★ 300No key
TUI for triaging Nessus findings: import .nessus into SQLite, launch nmap/NetExec against affected hosts, track review progress across scans, and drive it all from an MCP client.
PythonMIT★ 70No key
AI-KIT is a practical starter kit for development: ChatGPT/Codex, Claude, DeepSeek, KIMI, and other coding agents. It provides reusable project context, rules for each stack, adaptive model routing, c
SkillMIT★ 46No key
Bug bounty agent framework for Claude Code, Codex, Gemini, Cursor, Windsurf, Copilot, and OpenClaw — 48 agents, 26 commands, 19 CLI tools, 2 MCP servers, autonomous hunt loops, exploit chain builder.
MCPLink only★ 1.0k
Secure, modular MCP server wrapping nmap, nuclei, gobuster, subfinder, httpx, nikto, sqlmap for AI-powered pentesting
PythonMIT★ 1Few starsNo key
An AI-driven dynamic protocol fuzzer for the Model Context Protocol (MCP). Prove runtime exploitability by discovering state violations, transport crashes, and application-layer logic flaws (SSRF, LFI
PythonMIT★ 27No key
PythonMIT★ 7No key
MCP server for authorized pentest workflows: Nmap/Gobuster orchestration, context aggregation, AI-assisted triage, and reporting.
PythonMIT★ 23No key
Offensive security framework for AI agents and MCP servers.
PythonApache-2.0★ 7No key
An open, local-first security testing platform for pentesters, AI agents, CI/CD pipelines, and teams.
PythonAGPL-3.0★ 8No key
🎯 AI-orchestrated offensive security framework. Automated recon, CVE mapping, exploit POC generation & remediation across a discovery → validation → report pipeline. CLI · API · MCP · dashboard. Powe
PythonMIT★ 5No key
Linux privesc enumerator that confirms exploitability and gives you the exact root shell command - no GTFOBins searching. MCP server + AI-agent skills included.
PythonMIT★ 4Few starsNo key
Agentic exporter and runner for internal network pentesting, autonomous host discovery, patch/vulnerability state collection, and server/application inventory, surfaced as structured findings for the
PythonMIT★ 5No key
Sistema multi-agente de ciberseguridad ofensiva/defensiva construido con LLMs. Orquesta 6 subagentes especializados (OSINT, pentesting, hardening, forense) sobre un laboratorio Docker aislado, integra
SkillLink only★ 3Few stars
Exposure intelligence for the AI-infrastructure layer — finds and weighs leaked credentials, MCP/agent configs, git-metadata secrets, and supply-chain risk, and tells you which exposures to trust. Act
PythonMIT★ 5No key
Who stands behind it
