MCPwned is a companion extension that enables pentesters to effectively test MCP servers. It recognizes MCP-like endpoints, provies a scanner and a tree-like display of capabilities, as well as a template request for each capability. It also provides quality of life features such as response extracting and session ID refresh.
☆20Jul 3, 2026Updated 2 months ago
Alternatives and similar repositories for MCPwned
Users that are interested in MCPwned are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Unify your OAST provider management and consolidate all interactions into a single, streamlined workflow.☆26May 23, 2026Updated 3 months ago
- ☆29Updated this week
- Open source tooling to stop ICS phishing (malicious calendar invites)☆19Feb 24, 2026Updated 6 months ago
- API security testing framework for REST, GraphQL, and gRPC that validates authorization logic using role-based testing and YAML-driven te…☆76Updated this week
- The Java Burp Extension version of my BypassFuzzer tool☆40Sep 2, 2026Updated last week
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Crystal Palace library for proxying Nt API calls via the Threadpool☆108Oct 18, 2025Updated 10 months ago
- Combine words from two wordlist files and concatenate them with an optional delimiter☆39Sep 25, 2023Updated 2 years ago
- API discovery tool that maps attack surfaces from captured traffic and generates specs for REST, GraphQL, SOAP, and WebSocket APIs☆127Updated this week
- AI-Powered Web Attack Surface Enumeration☆54Sep 4, 2026Updated last week
- skill-veil is an open source static analysis and policy tool for the agent extension supply chain.☆27Aug 20, 2026Updated 3 weeks ago
- Bruteforcing from various scanner output - Automatically attempts default creds on found services.☆15Mar 10, 2025Updated last year
- ☆80Jan 1, 2026Updated 8 months ago
- An extension for Burp's Web Vulnerability Scanner that can detect API discovery metadata and extract data useful during recon.☆19Sep 13, 2025Updated 11 months ago
- 🔐 50+ MCP Security Servers for AI-Powered Pentesting | Integrate Nmap, Burp Suite, Nuclei, Shodan, BloodHound, Semgrep, Trivy | Model Co…☆27Jan 27, 2026Updated 7 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- MCP Attack Surface Detector - Burp plugin to make manual testing of MCP servers easier in Burp Suite☆33Feb 26, 2026Updated 6 months ago
- ☆63Feb 12, 2026Updated 7 months ago
- executing shellcode directly from a python variable☆30Dec 20, 2025Updated 8 months ago
- AWS SSO Device-Code Phishing Toolkit for Red / Purple Teams☆23Mar 10, 2026Updated 6 months ago
- AWSDoor is a red team automation tool designed to simulate advanced attacker behavior in AWS environments☆36Sep 17, 2025Updated 11 months ago
- Enumerate active EDR's on the system☆153Sep 23, 2025Updated 11 months ago
- A list of data breach lookup and other OSINT tools☆156Mar 30, 2026Updated 5 months ago
- This tool tries to find interesting stuff inside static files; mainly JavaScript and JSON files.☆94Jul 20, 2023Updated 3 years ago
- A simple OAuth App designed to capture OAuth tokens when users authenticate through GitHub OAuth flow.☆27Apr 20, 2026Updated 4 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Organizational asset discovery tool with 20+ plugins covering certificate transparency, passive DNS, and all 5 Regional Internet Registri…☆90Updated this week
- Burp Bounty Lab provides a safe, local target to validate that your Burp Bounty Pro scanner profiles detect vulnerabilities correctly. It…☆42May 15, 2026Updated 3 months ago
- Unofficial fork of Inferno that runs as a library inside an iPhone app☆33Updated this week
- Kibana app for RedELK☆17Mar 19, 2023Updated 3 years ago
- Salesforce identity and permission graph collector for BloodHound CE. Maps users, profiles, permission sets, roles, groups, sharing rules…☆48Jul 30, 2026Updated last month
- A VS Code plugin to execute arbitrary JavaScript code at runtime over a local HTTP endpoint.☆34Feb 10, 2026Updated 7 months ago
- An automated pipeline that leverages LLM's meta-learning capability to iteratively design and refine red-teaming systems without human in…☆31May 24, 2026Updated 3 months ago
- Fast Windows post-exploitation wins after initial access.☆29Jan 28, 2026Updated 7 months ago
- ☆24Sep 9, 2025Updated last year
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Security AI helper for Caido: pipes your local Claude Code / Gemini / Codex / Copilot CLI through 18 MCP tools for manual web security te…☆41Sep 2, 2026Updated last week
- Okta Data Collector for BloodHound Community☆17Apr 21, 2026Updated 4 months ago
- ExchangeHound is a defensive BloodHound OpenGraph collector for on-prem Microsoft Exchange that maps mailbox delegation and Exchange priv…☆77Apr 17, 2026Updated 4 months ago
- ☆28Mar 14, 2026Updated 5 months ago
- Create Entra Global Admin accounts from On-Prem☆25Jul 28, 2025Updated last year
- Just another AD training, but free.☆17Aug 9, 2025Updated last year
- A Burp Suite extension for Lightning/Aura framework security testing with advanced action management, context editing, and comprehensive …☆68Mar 2, 2026Updated 6 months ago