MCPwned is a companion extension that enables pentesters to effectively test MCP servers. It recognizes MCP-like endpoints, provies a scanner and a tree-like display of capabilities, as well as a template request for each capability. It also provides quality of life features such as response extracting and session ID refresh.
☆20Sep 28, 2026Updated 3 weeks ago
Alternatives and similar repositories for MCPwned
Users that are interested in MCPwned are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Convert HTTP requests into API spec☆14Feb 14, 2026Updated 8 months ago
- SOC Cockpit is a web-based operational command console for SOC (Security Operations Center) managers. It is designed around dense, shared…☆30Oct 14, 2026Updated last week
- A Burp extension that easily allows for switching a request's session (headers, cookies) on the fly☆33Jun 17, 2026Updated 4 months ago
- Open source tooling to stop ICS phishing (malicious calendar invites)☆20Feb 24, 2026Updated 7 months ago
- Unify your OAST provider management and consolidate all interactions into a single, streamlined workflow.☆26Oct 15, 2026Updated last week
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Crystal Palace library for proxying Nt API calls via the Threadpool☆106Oct 18, 2025Updated last year
- API security testing framework for REST, GraphQL, and gRPC that validates authorization logic using role-based testing and YAML-driven te…☆77Oct 3, 2026Updated 2 weeks ago
- Combine words from two wordlist files and concatenate them with an optional delimiter☆40Sep 25, 2023Updated 3 years ago
- Prevention-focused living-off-the-land testing framework mapped to MITRE ATT&CK.☆29Jul 24, 2026Updated 2 months ago
- ☆43Sep 9, 2026Updated last month
- ☆80Jan 1, 2026Updated 9 months ago
- A collection of ChatGPT prompts designed to assist security researchers and bug bounty hunters in identifying web application vulnerabili…☆20Apr 12, 2025Updated last year
- API discovery tool that maps attack surfaces from captured traffic and generates specs for REST, GraphQL, SOAP, and WebSocket APIs☆139Oct 3, 2026Updated 2 weeks ago
- Enumerate active EDR's on the system☆155Sep 23, 2025Updated last year
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- AI-Powered Web Attack Surface Enumeration☆55Oct 7, 2026Updated 2 weeks ago
- This tool tries to find interesting stuff inside static files; mainly JavaScript and JSON files.☆93Jul 20, 2023Updated 3 years ago
- Solving CAPTCHA with Image Classification☆10Mar 13, 2025Updated last year
- An extension for Burp's Web Vulnerability Scanner that can detect API discovery metadata and extract data useful during recon.☆19Sep 13, 2025Updated last year
- WINFLESHER v2.0 - ATTACK SURFACE SECURITY FRAMEWORK☆26Sep 21, 2026Updated last month
- ☆63Feb 12, 2026Updated 8 months ago
- A curated list of AI-powered pentesting tools, frameworks, MCP servers, and resources for autonomous cybersecurity operations☆92Updated this week
- dauthi is a tool that takes advantage of API functionality across a variety of MDM solutions to perform user enumeration and single-facto…☆42Apr 23, 2024Updated 2 years ago
- Living Off the Land Credentials. Public credential defaults, locations, and exposure patterns for real products, SaaS/cloud services, app…☆61Jul 19, 2026Updated 3 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Comprehensive subdomain enumeration tool - 16+ passive OSINT sources, DNS brute force, permutation scanning, recursive enumeration & HTTP…☆26Jul 10, 2026Updated 3 months ago
- 🔐 50+ MCP Security Servers for AI-Powered Pentesting | Integrate Nmap, Burp Suite, Nuclei, Shodan, BloodHound, Semgrep, Trivy | Model Co…☆33Jan 27, 2026Updated 8 months ago
- Create Entra Global Admin accounts from On-Prem☆25Jul 28, 2025Updated last year
- Security research writeups☆19Aug 8, 2026Updated 2 months ago
- A Vulnerablity Radar That Runs With GIthub Actions☆60Updated this week
- executing shellcode directly from a python variable☆30Dec 20, 2025Updated 10 months ago
- Experimental Linux strace LLM agent☆21Apr 23, 2026Updated 6 months ago
- Submit Burp Suite extensions and updates to the BApp Store.☆18Oct 16, 2026Updated last week
- Framework for Automated Security Testing that is Scaleable and Asynchronous built on Microservices☆18Oct 13, 2016Updated 10 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆24Sep 9, 2025Updated last year
- Burp Suite Extension to monitor new scope☆16Mar 31, 2021Updated 5 years ago
- OWASP Foundation Web Respository☆11Oct 1, 2026Updated 3 weeks ago
- A graphing toolkit for threat research - and other things☆20Mar 21, 2026Updated 7 months ago
- A harmless cryptocurrency miner simulator for detection testing. Generates realistic mining-like artifacts without consuming resources or…☆15Feb 3, 2026Updated 8 months ago
- ReverseJS: A blog focused on reverse engineering Javascript☆12Feb 9, 2024Updated 2 years ago
- A awesome curated list of security resources, hardening tools, threat research, and governance frameworks specifically for Claude Code☆40Mar 12, 2026Updated 7 months ago