MCPwned is a companion extension that enables pentesters to effectively test MCP servers. It recognizes MCP-like endpoints, provies a scanner and a tree-like display of capabilities, as well as a template request for each capability. It also provides quality of life features such as response extracting and session ID refresh.
☆21Sep 28, 2026Updated last month
Alternatives and similar repositories for MCPwned
Users that are interested in MCPwned are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Convert HTTP requests into API spec☆15Feb 14, 2026Updated 8 months ago
- Open source tooling to stop ICS phishing (malicious calendar invites)☆20Feb 24, 2026Updated 8 months ago
- Unify your OAST provider management and consolidate all interactions into a single, streamlined workflow.☆27Oct 15, 2026Updated 3 weeks ago
- Bruteforcing from various scanner output - Automatically attempts default creds on found services.☆16Mar 10, 2025Updated last year
- Crystal Palace library for proxying Nt API calls via the Threadpool☆105Oct 18, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- API security testing framework for REST, GraphQL, and gRPC that validates authorization logic using role-based testing and YAML-driven te…☆77Oct 3, 2026Updated last month
- Combine words from two wordlist files and concatenate them with an optional delimiter☆40Sep 25, 2023Updated 3 years ago
- ☆80Jan 1, 2026Updated 10 months ago
- A Burp extension that easily allows for switching a request's session (headers, cookies) on the fly☆33Jun 17, 2026Updated 4 months ago
- Netrik — Nmap-driven internal-network service penetration testing (detection-only). See Beyond the Network.☆15Jul 17, 2026Updated 3 months ago
- The Java Burp Extension version of my BypassFuzzer tool☆41Oct 29, 2026Updated 2 weeks ago
- Asymmetric defense against adversarial AI agents. VeilGate evaluates each incoming request, redirects suspected agents into a per-IP-cons…☆15Jun 27, 2026Updated 4 months ago
- Prevention-focused living-off-the-land testing framework mapped to MITRE ATT&CK.☆31Jul 24, 2026Updated 3 months ago
- ☆44Sep 9, 2026Updated 2 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Enumerate active EDR's on the system☆155Sep 23, 2025Updated last year
- Solving CAPTCHA with Image Classification☆10Mar 13, 2025Updated last year
- API discovery tool that maps attack surfaces from captured traffic and generates specs for REST, GraphQL, SOAP, and WebSocket APIs☆141Oct 3, 2026Updated last month
- An extension for Burp's Web Vulnerability Scanner that can detect API discovery metadata and extract data useful during recon.☆19Sep 13, 2025Updated last year
- dauthi is a tool that takes advantage of API functionality across a variety of MDM solutions to perform user enumeration and single-facto…☆42Apr 23, 2024Updated 2 years ago
- AI-Powered Web Attack Surface Enumeration☆67Oct 7, 2026Updated last month
- Tool for checking reflecting Parameters in a URL.☆10Aug 31, 2020Updated 6 years ago
- Hourly CVE watchlist on GitHub Actions. Put your vendors and products in watchlist.yaml and a match opens an issue with KEV and EPSS cont…☆60Updated this week
- executing shellcode directly from a python variable☆30Dec 20, 2025Updated 10 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- WINFLESHER v2.0 - ATTACK SURFACE SECURITY FRAMEWORK☆26Sep 21, 2026Updated last month
- Experimental Linux strace LLM agent☆21Apr 23, 2026Updated 6 months ago
- Framework for Automated Security Testing that is Scaleable and Asynchronous built on Microservices☆18Oct 13, 2016Updated 10 years ago
- Detect BypassUAC using AMSI☆28Feb 18, 2025Updated last year
- A collection of ChatGPT prompts designed to assist security researchers and bug bounty hunters in identifying web application vulnerabili…☆21Apr 12, 2025Updated last year
- Comprehensive subdomain enumeration tool - 16+ passive OSINT sources, DNS brute force, permutation scanning, recursive enumeration & HTTP…☆25Jul 10, 2026Updated 4 months ago
- ☆22Jul 30, 2026Updated 3 months ago
- AWS Quick Start Team☆16Oct 3, 2024Updated 2 years ago
- ☆24Sep 9, 2025Updated last year
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Submit Burp Suite extensions and updates to the BApp Store.☆18Updated this week
- CICD Abuse Detection☆44Apr 28, 2026Updated 6 months ago
- Command and Control Framework using powershell implants☆36Jun 17, 2025Updated last year
- A TypeScript package that provides AI-powered agents for Application Security (AppSec) tasks, built on top of the frontier models.☆19Aug 21, 2026Updated 2 months ago
- LinkedIn recon the easy way☆113Jul 3, 2025Updated last year
- Security research writeups☆19Updated this week
- Apple artifacts database - Mirror of https://github.com/cocool97/appledb_rs☆29Oct 14, 2025Updated last year
Are these results useful?