MCP server for Exploit-DB — search public exploits and shellcode by CVE, platform, type, and tags.

Official MCP server for the Exploit Intelligence Platform

MCP server for the Exploit Intelligence Platform v3 research API

A Model Context Protocol server for Exploit-DB integration

MCP tools for AI-assisted reverse engineering, binary analysis, exploit development, and security research calculations.

MCP-native CVE, PoC & exploit discovery toolkit (Metasploit, Nuclei, GitHub & more)

MCP-based autonomous pentesting framework — Claude, ChatGPT, or Ollama orchestrate 70+ Kali Linux tools (nmap, sqlmap, Metasploit & more) for recon, exploitation, and post-exploitation, Wireshark packet analysis, and headless Chromium evidence capture. Fully containerized, authorization-enforced, structured pentest reports out of the box.

Retrieve CVEs and index them inside your codebase. Offline CVE + exploit intelligence: one SQLite index, one CLI, one MCP server.

Agentic security CLI that finds reachable vulnerabilities, writes the fix, and attacks its own patch in an isolated Nebius sandbox. A patch is certified only when the live exploit fails. Powered by NVIDIA Nemotron on Nebius Token Factory. Works as a CI gate and MCP server.

Experimental MCP local server for bug hunters to speed up exploits searches

Cybersecurity data for AI agents — CVE database, vulnerability search, threat intelligence, exploit info

Autonomous multi-agent security auditing platform with runtime exploit verification.

Professional MCP servers for penetration testing automation - SQLi, Exploit, Auth, Recon

Dependency vulnerability scanner over OSV.dev with CISA KEV actively-exploited flags. No API key.

CISA Known Exploited Vulnerabilities feed + remediation deadlines for US federal + critical infrastructure operators.

MCP server for Shodan — host/network recon, CVE and exploit lookup, InternetDB, and persistent alerts (34 tools).

Bring HackTricks pentesting knowledge into Claude Desktop. Search 1000+ security techniques, exploits, and payloads without leaving your AI assistant. MCP-powered, npx-ready.

MCP server for the Frame security scanner: scan, verify, fix, exploit, framework packs and the separation logic solver, from any MCP client.

Dependency vulnerability monitoring MCP server — knows your lockfile, prioritizes by EPSS exploit probability, recommends fix versions.

Agentic MCP for Roblox. Run tests and find exploits in your game from Claude Code, Codex, or Gemini.

10 intentionally malicious MCP servers that exploit protocol features to attack AI clients. For security research and defense testing.

NotCVE MCP server — live vulnerability intelligence for AI agents: 365k+ CVEs/NotCVEs, CVSS, EPSS, CISA KEV, affected versions, exploits and patches from 80+ sources.

🏠 Système d'exploitation pour maison connectée - Contrôlez lumières, chauffage, portes et température via API REST, dashboard web et assistants IA (protocole MCP). Prêt pour Docker avec simulateur ESP32.

Android Pentest AI Assistant (APAIA) is an MCP server for Claude AI that was specifically created for Android pentesting/bug bounty purposes and aims to provide assistance for recon, static code analysis and exploits using ADB and JADX.

🔌 Exposes EU CRA Article 14 actively-exploited-vulnerability reporter - ENISA + CSIRT payload. 11 Sept 2026 cliff. MIT. By MEOK AI Labs.

🛡️ Production-grade Model Context Protocol (MCP) Server for Autonomous AI Security Bug Hunting, Persistent Pentest Memory, Dynamic Checklists, Secret Redaction, and Exploit PoC Generation.

Local stdio MCP server for Dynamic Feed — live data AI models lack (prices, weather, CVEs & exploited vulns, internet outages, global disasters, satellites/space, world news + more). Bridges any MCP client to dynamicfeed.ai.

Know which security findings to fix first, across the scanners you already run. SAST, SCA, secrets, IaC and containers, every finding ranked by exposure, criticality, exploitability and, for Go, reachability.

Every CVE gets a verdict. Every verdict comes with receipts. Open-source CVE triage from CISA KEV, EPSS and public exploit feeds, rebuilt hourly, with open feeds and an MCP server.

Authorization-gated penetration testing MCP server for AI agents - 80 tools (recon, vuln scanning, web app, exploit, CTF, reporting) with engagement-file scope enforcement. pipx install pentester-mcp

Smart contract security auditor for Claude Code — vuln detection, exploit PoCs, mainnet-fork simulation, audit cards, on-chain certificates. Solidity + Vyper · 38 commands · 19 agents · 33 skills · 9 MCP servers.

Open source supply chain risk analysis via MCP — give your AI agent direct access to CVE records, CISA KEV exploits, maintainer bus-factor scores, and typosquat detection across 7 live intelligence sources.

Stdlib-only Python MCP server with three security tools: CVE lookup via OSV.dev, host exposure via Shodan InternetDB, and orchestration of a locally installed Nuclei scanner. No exploit code bundled; 19 tests; alpha companion to Voraxx.

Multi-agent SecOps research playground — red/blue team simulation built on phantom-mesh. MCP server exposing recon/exploit/detect/respond tools to Claude Code, Cursor, or any MCP-compatible runtime.

OffSeq Threat Radar MCP server: CVE, CISA KEV, EPSS and exploit intelligence, SBOM scans and IOC checks for coding agents. Gemini CLI extension and Claude Code plugin.

Scanners flag CVEs. CheckExploit proves which ones actually reach your code — by running the real exploit against your actual code inside an isolated sandbox. Supports Python,Node repos; generates and verifies remediation patches. Built on OpenCode + MCP.

Cybersecurity intelligence for AI agents — search 200,000+ CVEs, check the CISA Known Exploited Vulnerabilities catalog, enumerate subdomains via Certificate Transparency, audit DNS and email security, scan internet-exposed hosts via Censys, and investigate domain registration — all through a single MCP server.

Compiler-grade multi-file security, business-logic & concurrency verifier in Rust. Traces cross-file taint via an O(V+E) Guard-Set Lattice (TS/JS/Go/Python/Rust), proves exploits in a Linux Bubblewrap sandbox, and exposes a stdio MCP server.

Context for a CVE from EchelonGraph’s CVE Pulse API (CLI + MCP) — CVSS, CISA KEV, EPSS, SSVC, exploit and patch signals, product matching, vendor advisories and the internet-exposure footprint. No key or account: a single dependency-free binary in place of the vendor’s npx-launched MCP server

Autonomous cyber red team intelligence for AI agents — this MCP server gives Claude, GPT-4o, and any MCP-compatible agent the ability to run quantitative attack simulations, synthesize exploit chains, forecast vulnerability emergence, and model adversary behavior using eight rigorously implemented mathematical frameworks.

Claude-native, governed offensive-OSINT & external attack-surface platform for authorized red-team and bug-bounty. Multi-agent recon across web, identity, cloud, secrets & breach intel under deterministic scope/evidence/approval controls, with human-reviewed findings for hand-off to pen-testing. Not an exploitation framework.

Open-source, read-only AWS security scanner. 110 checks across 25 services, 31 attack-chain rules, 64 IAM escalation methods (incl. lateral AssumeRole graph), Proof Mode exploitability verification, data perimeter and Bedrock AgentCore checks, Blast Radius CLI, Threat Feed, What-If simulator, AI-SPM, 6 compliance frameworks, breach-cost estimation, MCP server. CLI + Terraform remediation on every finding.

Generate WAF rules and exposing multiple scenarios

Blitz Strike — a universal MCP security-audit toolbelt. Reconnaissance at speed. Analysis in depth. Validation before report.

MCP server for vulnerability assessment — searches NVD, CISA KEV & GitHub PoCs with RAG-powered semantic search over HackTricks & PayloadsAllTheThings.

🎯 Advanced GPT-5 Powered Ghidra Reverse Engineering MCP Server | 7 AI-Enhanced Analysis Tools | Professional Binary Analysis | TechSquad Inc. Proprietary Software

🏢 Enterprise Windows Service for GPT-5 Powered Ghidra Reverse Engineering | Professional MSI Installer | PowerShell Management | Windows Security Integration

Retrieve CVEs and index them inside your codebase. One SQLite+FTS5 index, one CLI, one MCP server. Never answer a CVE from memory again.

🪐 AetherScope V2 — SAST 3D WebGL & Serveur MCP (Claude/Antigravity/Cursor). Détection de 150+ CWE & Zero-Day Patterns (Rust, C++, PHP, Node.js, Web3), contrats EARS BLAKE3 et PoC Bug Bounty.