tcpk

active

Thick client penetration testing and MSIX security audit toolkit for Windows. Audits .NET, Electron and native binaries: static and runtime checks, IL-verified findings, computed CVSS v4.0, CWE/ATT&CK mapping, SBOM, HTML/Excel reports. PowerShell engine, GUI, MCP server and agentic AI triage.

Code-only MCP server: no hosted endpoint, so you install and run it yourself. It is not probed, graded or counted in our reachability statistics.

Get it

Repository: github.com/V33RU/tcpk
License: MIT
Last update: 2026-11-13
GitHub stars: ★ 24
Homepage: v33ru.github.io/tcpk/

appsec appx clickonce cvss dll-hijacking mcp-server msix offensive-security penetration-testing pentest-tool pentesting powershell

Listed in

github · source

Run this server as a hosted endpoint? Submit the endpoint and it moves to the remote directory, where it is probed and graded.