MCPwned is a companion extension that enables pentesters to effectively test MCP servers. It recognizes MCP-like endpoints, provies a scanner and a tree-like display of capabilities, as well as a template request for each capability. It also provides quality of life features such as response extracting and session ID refresh.
☆20Sep 28, 2026Updated this week
Alternatives and similar repositories for MCPwned
Users that are interested in MCPwned are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Unify your OAST provider management and consolidate all interactions into a single, streamlined workflow.☆26May 23, 2026Updated 4 months ago
- Open source tooling to stop ICS phishing (malicious calendar invites)☆20Feb 24, 2026Updated 7 months ago
- Crystal Palace library for proxying Nt API calls via the Threadpool☆106Oct 18, 2025Updated 11 months ago
- API security testing framework for REST, GraphQL, and gRPC that validates authorization logic using role-based testing and YAML-driven te…☆77Updated this week
- skill-veil is an open source static analysis and policy tool for the agent extension supply chain.☆28Aug 20, 2026Updated last month
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- The Java Burp Extension version of my BypassFuzzer tool☆40Updated this week
- Bruteforcing from various scanner output - Automatically attempts default creds on found services.☆15Mar 10, 2025Updated last year
- ☆30Sep 9, 2026Updated 3 weeks ago
- API discovery tool that maps attack surfaces from captured traffic and generates specs for REST, GraphQL, SOAP, and WebSocket APIs☆131Updated this week
- AI-Powered Web Attack Surface Enumeration☆56Sep 4, 2026Updated 3 weeks ago
- Combine words from two wordlist files and concatenate them with an optional delimiter☆39Sep 25, 2023Updated 3 years ago
- ☆62Feb 12, 2026Updated 7 months ago
- ☆80Jan 1, 2026Updated 9 months ago
- Unofficial fork of Inferno that runs as a library inside an iPhone app☆39Sep 24, 2026Updated last week
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Kibana app for RedELK☆17Mar 19, 2023Updated 3 years ago
- Enumerate active EDR's on the system☆154Sep 23, 2025Updated last year
- ☆24Sep 9, 2025Updated last year
- 🔐 50+ MCP Security Servers for AI-Powered Pentesting | Integrate Nmap, Burp Suite, Nuclei, Shodan, BloodHound, Semgrep, Trivy | Model Co…☆30Jan 27, 2026Updated 8 months ago
- This tool tries to find interesting stuff inside static files; mainly JavaScript and JSON files.☆94Jul 20, 2023Updated 3 years ago
- ☆28Mar 14, 2026Updated 6 months ago
- MCP Attack Surface Detector - Burp plugin to make manual testing of MCP servers easier in Burp Suite☆33Feb 26, 2026Updated 7 months ago
- Create Entra Global Admin accounts from On-Prem☆25Jul 28, 2025Updated last year
- Organizational asset discovery tool with 20+ plugins covering certificate transparency, passive DNS, and all 5 Regional Internet Registri…☆91Updated this week
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A Vulnerablity Radar That Runs With GIthub Actions☆60Updated this week
- LinkedIn recon the easy way☆111Jul 3, 2025Updated last year
- OWASP Foundation Web Respository☆11Aug 1, 2026Updated 2 months ago
- Automatically deploying Mythic C2 in Azure using Terraform☆25Jul 3, 2026Updated 3 months ago
- ☆12Oct 1, 2024Updated 2 years ago
- ☆10May 15, 2024Updated 2 years ago
- Jailbreaker is a local evaluation tool for testing chatbot and agent-style systems against jailbreak, prompt-injection, and related failu…☆108Updated this week
- AWS Quick Start Team☆16Oct 3, 2024Updated 2 years ago
- Request device ticket/token using the device's MSA☆37Aug 25, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- executing shellcode directly from a python variable☆30Dec 20, 2025Updated 9 months ago
- Burp Bounty Lab provides a safe, local target to validate that your Burp Bounty Pro scanner profiles detect vulnerabilities correctly. It…☆44May 15, 2026Updated 4 months ago
- Framework for Automated Security Testing that is Scaleable and Asynchronous built on Microservices☆18Oct 13, 2016Updated 9 years ago
- A graphing toolkit for threat research - and other things☆19Mar 21, 2026Updated 6 months ago
- Send high priority Deep Security events to the AWS Security Hub☆13Jul 31, 2019Updated 7 years ago
- OSV JSON format file generator for official Kubernetes CVE Feed☆15Sep 4, 2026Updated 3 weeks ago
- Proof-of-Concept scripts for various issues.☆14Jan 23, 2017Updated 9 years ago