MCPwned is a companion extension that enables pentesters to effectively test MCP servers. It recognizes MCP-like endpoints, provies a scanner and a tree-like display of capabilities, as well as a template request for each capability. It also provides quality of life features such as response extracting and session ID refresh.
☆20Jul 3, 2026Updated last month
Alternatives and similar repositories for MCPwned
Users that are interested in MCPwned are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Unify your OAST provider management and consolidate all interactions into a single, streamlined workflow.☆26May 23, 2026Updated 2 months ago
- Open source tooling to stop ICS phishing (malicious calendar invites)☆18Feb 24, 2026Updated 5 months ago
- ☆29Mar 24, 2026Updated 4 months ago
- API security testing framework for REST, GraphQL, and gRPC that validates authorization logic using role-based testing and YAML-driven te…☆72Updated this week
- The Java Burp Extension version of my BypassFuzzer tool☆36Updated this week
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Crystal Palace library for proxying Nt API calls via the Threadpool☆106Oct 18, 2025Updated 9 months ago
- Combine words from two wordlist files and concatenate them with an optional delimiter☆40Sep 25, 2023Updated 2 years ago
- API discovery tool that maps attack surfaces from captured traffic and generates specs for REST, GraphQL, SOAP, and WebSocket APIs☆115Updated this week
- AI-Powered Web Attack Surface Enumeration☆46Feb 5, 2026Updated 5 months ago
- skill-veil is an open source static analysis and policy tool for the agent extension supply chain.☆25Jul 5, 2026Updated 3 weeks ago
- Bruteforcing from various scanner output - Automatically attempts default creds on found services.☆16Mar 10, 2025Updated last year
- ☆79Jan 1, 2026Updated 7 months ago
- An extension for Burp's Web Vulnerability Scanner that can detect API discovery metadata and extract data useful during recon.☆19Sep 13, 2025Updated 10 months ago
- 🔐 50+ MCP Security Servers for AI-Powered Pentesting | Integrate Nmap, Burp Suite, Nuclei, Shodan, BloodHound, Semgrep, Trivy | Model Co…☆25Jan 27, 2026Updated 6 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- MCP Attack Surface Detector - Burp plugin to make manual testing of MCP servers easier in Burp Suite☆30Feb 26, 2026Updated 5 months ago
- ☆62Feb 12, 2026Updated 5 months ago
- executing shellcode directly from a python variable☆30Dec 20, 2025Updated 7 months ago
- Submit Burp Suite extensions and updates to the BApp Store.☆18Jul 24, 2026Updated last week
- A collection of ChatGPT prompts designed to assist security researchers and bug bounty hunters in identifying web application vulnerabili…☆16Apr 12, 2025Updated last year
- AWS SSO Device-Code Phishing Toolkit for Red / Purple Teams☆23Mar 10, 2026Updated 4 months ago
- Enumerate active EDR's on the system☆153Sep 23, 2025Updated 10 months ago
- AWSDoor is a red team automation tool designed to simulate advanced attacker behavior in AWS environments☆36Sep 17, 2025Updated 10 months ago
- A list of data breach lookup and other OSINT tools☆148Mar 30, 2026Updated 4 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- A Vulnerablity Radar That Runs With GIthub Actions☆59Updated this week
- This tool tries to find interesting stuff inside static files; mainly JavaScript and JSON files.☆93Jul 20, 2023Updated 3 years ago
- Organizational asset discovery tool with 20+ plugins covering certificate transparency, passive DNS, and all 5 Regional Internet Registri…☆87Updated this week
- A simple OAuth App designed to capture OAuth tokens when users authenticate through GitHub OAuth flow.☆26Apr 20, 2026Updated 3 months ago
- Burp Bounty Lab provides a safe, local target to validate that your Burp Bounty Pro scanner profiles detect vulnerabilities correctly. It…☆43May 15, 2026Updated 2 months ago
- Kibana app for RedELK☆18Mar 19, 2023Updated 3 years ago
- Salesforce identity and permission graph collector for BloodHound CE. Maps users, profiles, permission sets, roles, groups, sharing rules…☆47Updated this week
- A VS Code plugin to execute arbitrary JavaScript code at runtime over a local HTTP endpoint.☆32Feb 10, 2026Updated 5 months ago
- An automated pipeline that leverages LLM's meta-learning capability to iteratively design and refine red-teaming systems without human in…☆30May 24, 2026Updated 2 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Fast Windows post-exploitation wins after initial access.☆29Jan 28, 2026Updated 6 months ago
- Security AI helper for Caido: pipes your local Claude Code / Gemini / Codex / Copilot CLI through 18 MCP tools for manual web security te…☆38Jun 26, 2026Updated last month
- ☆18Sep 9, 2025Updated 10 months ago
- Okta Data Collector for BloodHound Community☆15Apr 21, 2026Updated 3 months ago
- ExchangeHound is a defensive BloodHound OpenGraph collector for on-prem Microsoft Exchange that maps mailbox delegation and Exchange priv…☆76Apr 17, 2026Updated 3 months ago
- ☆28Mar 14, 2026Updated 4 months ago
- Create Entra Global Admin accounts from On-Prem☆25Jul 28, 2025Updated last year