pentest-mcp

active

NOT for educational purposes: An MCP server for professional penetration testers including STDIO/HTTP/SSE support, nmap, go/dirbuster, nikto, JtR, hashcat, wordlist building, and more.

Code-only MCP server: no hosted endpoint, so you install and run it yourself. It is not probed, graded or counted in our reachability statistics.

Get it

Repository: github.com/DMontgomery40/pentest-mcp
License: AGPL-3.0
Last update: 2026-10-30
GitHub stars: ★ 151
Homepage: dmontgomery40.github.io/pentest-mcp/

cybersecurity dirbuster gobuster hashcat http-streaming john-the-ripper jtr mcp mcp-server model-context-protocol nikto nmap

Listed in

github · source

Run this server as a hosted endpoint? Submit the endpoint and it moves to the remote directory, where it is probed and graded.