Explore
MCP servers and skills: search, filter by where they run, and compare.
1–24 of 449 tools for “pentest-tool”
Clear allpentest-mcp-serverLayeSec006
Local
MCP servers and skills: search, filter by where they run, and compare.
1–24 of 449 tools for “pentest-tool”
Clear allMCP server for penetration testing
SkillMIT★ 18No key
Elevate your AI assistants (like Claude & Cursor) into autonomous cybersecurity experts. Pentester-MCP integrates 200+ pentesting tools via the Model Context Protocol (MCP) using a secure Docker sandb
SkillMIT★ 55No key
Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.
PythonMIT★ 1.7kNo key
Command-line interface for the Pentest-Tools.com API.
Hosted by authorGPL-3.0★ 3Few starsNo key
Offline methodology engine and payload workshop for authorized penetration testing, CTF, security research, and education via MCP. STDIO or Streamable HTTP.
Node.jsApache-2.0★ 1Few starsNo key
An automated way to discover practical, hands on penetration testing projects using Claude, with structured learning roadmaps, relevant security tools, and progressive challenges to build real world c
SkillMIT★ 19No key
MCP server for authorized pentest workflows: Nmap/Gobuster orchestration, context aggregation, AI-assisted triage, and reporting.
PythonMIT★ 23No key
NOT for educational purposes: An MCP server for professional penetration testers including STDIO/HTTP/SSE support, nmap, go/dirbuster, nikto, JtR, hashcat, wordlist building, and more.
Node.jsMIT★ 149No key
Bug bounty agent framework for Claude Code, Codex, Gemini, Cursor, Windsurf, Copilot, and OpenClaw — 48 agents, 26 commands, 19 CLI tools, 2 MCP servers, autonomous hunt loops, exploit chain builder.
MCPLink only★ 1.0k
Open-source Claude Code skills, agents, and slash commands for AI-powered penetration testing, bug bounty hunting, and security research
SkillMIT★ 570No key
Public skill pack for AI coding/automation/penetration-testing agents.
in the skill textMCP servers - web engineering pipelines - ML/DL experiment workflows - cybersecurity triage and authorized penetration-testing workflows ## Why This Repository - Standardized skill contract (`SKILL.md`, `agents/openai.yaml`, script CLI contract
SkillApache-2.0★ 11No key
Evidence-backed AppSec for AI applications and agents. Powered by HAIEC.
Node.jsMIT★ 4Few starsNo key
Security testing toolkit for AI Agent: curated SecLists wordlists, injection payloads, and expert agents for authorized pentesting, CTFs, and bug bounties
SkillLink only★ 389
A practical, community-driven checklist for pentesting MCP servers. Covers traffic analysis, tool-call behavior, namespace abuse, auth flows, and remote server risks. Maintained by Appsecco and licens
SkillCC-BY-4.0★ 41No key
🔐 50+ MCP Security Servers for AI-Powered Pentesting | Integrate Nmap, Burp Suite, Nuclei, Shodan, BloodHound, Semgrep, Trivy | Model Context Protocol for Cybersecurity
SkillMIT★ 31No key
Agentic pentest & red-team harness via Burp Suite MCP toolkit
SkillApache-2.0★ 7No key
AI-orchestrated, Kali-native pentesting lab: an MCP tool-server with scope/VPN/rate/audit enforced in code, independent finding verification, MITRE ATT&CK + OWASP mapping, a reusable findings library,
SkillMIT★ 13No key
AI-powered web application penetration testing skills with Claude Code
SkillLink only★ 53
MCP runtime for AI-assisted security testing with Kali tools, explicit target controls, bounded scanning, structured evidence, and persistent Docker deployment.
GoMIT★ 25No key
🛡 The reference playbook for pentesting AI chatbots & LLM-powered apps in one place. Ready-to-use payloads covering the full OWASP LLM Top 10 plus frontier vectors (MCP · RAG · A2A · computer-use · v
MCPLink only★ 37
Jikida — the security toolkit for modern and AI-built web apps: pentest, code & repo scanning, a managed WAF, and an MCP server for AI editors.
Node.jsApache-2.0★ 1Few starsNo key
Who stands behind it
