MCP servers and skills: search, filter by where they run, and compare.
1–24 of 276 tools for “security-research”
Clear allAI-powered security research assistant for Claude Code — structured assessment workflows, tool orchestration, and professional reporting across recon, enumeration, vulnerability scanning, and secrets
SkillMIT★ 22No key
AI Security Research Radar — AI for security and security for AI
SkillLink only★ 7
Advanced Shodan-based scanner for discovering, verifying, and enumerating Model Context Protocol (MCP) servers and AI infrastructure tools over HTTP & SSE.
in the readmeMCP Scanner > **A Knostic Research Project** > Advanced security research tool for discovering and analyzing Model Context Protocol (MCP) servers using the Shodan search engine. *Part
SkillMIT★ 57No key
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with
in the skill texte.g. red-team C2, phishing simulation, exploitation) intended for **authorized penetration testing, security research, defense, and education**. Only use them against systems you own or have
SkillApache-2.0★ 35kNo key
AI-powered OSINT agent with interactive REPL, MCP server, and CLI. 20 tools. Works with Claude, GPT-4, or local models. For authorized security research only.
PythonMIT★ 1.8kNo key
This repository demonstrates a variety of **MCP Poisoning Attacks** affecting real-world AI agent workflows.
in the readmeMCP Tool Poisoning Security Research  > **⚠️ IMPORTANT SECURITY NOTICE**: This repository contains security research demonstrating critical vulnerabilities
SkillMIT★ 15No key
A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identi
in the skill textOWASP Juice Shop, Hacker101, testphp.vulnweb.com). Built by ** Sachin Sharma ** — Bug Hunting & GenAI Security Research. SPONSORED BY --- ## What is this? `claude-bughunter
SkillMIT★ 5.1kNo key
claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a spec
in the skill textaren't using. **Use cases:** authorized red team engagements, bug bounty triage, security research, CTF preparation, operator training, and methodical attack surface exploration. **for our actual
SkillMIT★ 7.6kNo key
Open-source Claude Code skills, agents, and slash commands for AI-powered penetration testing, bug bounty hunting, and security research
SkillMIT★ 570No key
Offline methodology engine and payload workshop for authorized penetration testing, CTF, security research, and education via MCP. STDIO or Streamable HTTP.
Node.jsApache-2.0★ 1Few starsNo key
Autonomous Offensive Security, Bug Bounty & Red Teaming Agent Framework powered by Hermes Agent, specialized reasoning skills, and multi-model LLM orchestration.
in the skill textfor all supported AI coding editors and clients. - Prompt Engineering Guide — Structuring security research prompts effectively. - Telegram Gateway Setup — Configuring remote execution via Telegram. - Tools & Skills
SkillApache-2.0★ 945No key
🛡️ Security audit CLI for Model Context Protocol (MCP) servers — scan AI agent configs for tool poisoning, rug pulls, hardcoded secrets, command injection & supply-chain risks. Pure Python, SARIF + C
in the readmeand execute commands. Adoption exploded to **thousands of public MCP servers**, and security research keeps confirming the same story: **the MCP attack surface is real and
PythonMIT★ 296No key
The multiplayer AI offensive security OS - open, self-improving, extensible. Find, verify, and fix vulnerabilities.
MCPLink only★ 512
AI-Powered Offensive Security Research Engine - desktop-native security testing platform with native MCP integration. 90 tools, MITM proxy, stealth browser, autonomous AI agent. Built on Tauri + Rust
SkillMIT★ 51No key
MCP Parasite
in the readmeServer Parasitic Attack on MCP-Enabled AI Agents > **WARNING: This is a security research proof-of-concept for responsible disclosure purposes only.** > > **DO NOT use this
SkillMIT★ 46No key
Offensive security toolkit for Claude Code covering red team, exploit dev, AD attacks, EDR bypass, mobile pentest
in the skill textOffensive Security Research Config for Claude Code A spec-driven offensive security framework for Claude Code — structured engagement workflows based on the Cyber Kill Chain
SkillMIT★ 392No key
10 intentionally malicious MCP servers that exploit protocol features to attack AI clients. For security research and defense testing.
SkillMIT★ 9No key
AI Powered penetration testing Platform for offensive security research
MCPLink only★ 155
Stream-first CAN & J1939 toolkit for security research and AI agents — typed JSONL events, CLI, TUI, fuzzing, MCP server.
PythonGPL-3.0★ 4Few starsNo key
Investigation toolkit for Claude Code: case management, OSINT, structured analytic techniques, chain-of-custody evidence capture, and bundled threat-intel MCP servers.
in the readmedue diligence, threat intelligence, incident response, digital forensics, journalistic research, competitive intel, security research, CTF challenges. ## How it works ### Investigation lifecycle ```mermaid flowchart LR Start([New
SkillMIT★ 52No key
MCP server for unified threat intelligence - AlienVault OTX, AbuseIPDB, GreyNoise, and abuse.ch feeds
in the readmeMCP ]( MCP server providing unified access to multiple threat intelligence sources for security research and analysis. ## Why Use This? If you're doing security research, incident
Node.jsMIT★ 9No key
A collection of servers which are deliberately vulnerable to learn Pentesting MCP Servers.
in the readmesignal outcomes for real-world systems. This lab repository exists to support security research and hands-on training for pentesters, who are on their journey
SkillMIT★ 279No key
Detonate files & URLs in cloud malware sandboxes (Hybrid Analysis, tria.ge, ANY.RUN) and enrich IOCs across MalwareBazaar, ThreatFox, URLhaus, Feodo, URLScan & VirusTotal — straight from Claude. BYOK,
in the readmeIOCs and MITRE ATT&CK techniques — directly from Claude.** > [!WARNING] > **For authorized security research and defensive use only.** This server submits files and URLs to **third
PythonMIT★ 33No key
A Model Context Protocol (MCP) server for interacting with the Intigriti bug bounty platform's Researcher API. This enables AI assistants like Claude to help security researchers manage their bug boun
Node.jsMIT★ 4Few starsNo key
Who stands behind it
