Deliberately vulnerable MCP server (aka MCP Goat) for security training — 26 challenges across 4 difficulty levels (incl. a secure reference), a victim-agent harness, and one-command Docker deploy. Practice penetration testing against the Model Context Protocol.
☆12Aug 17, 2026Updated 2 months ago
Alternatives and similar repositories for MCPGoat
Users that are interested in MCPGoat are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- OWASP MCP Security Testing Guide☆57Oct 15, 2026Updated 2 weeks ago
- Web File Manager☆11Jul 30, 2026Updated 3 months ago
- Active Directory forensic framework☆16May 18, 2026Updated 5 months ago
- A Python 3 package with tools for collecting, cleaning, and exporting datasets from local Git repositories, as well as creating network d…☆10Feb 2, 2020Updated 6 years ago
- Audit your Google Cloud Platform (GCP) project for LIST permissions — fast, efficient, and with visibility.☆14May 7, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ROCmFPX Family for AMD Hardware and Processors. More quants and special agent quants☆14Sep 19, 2026Updated last month
- Rust rewrite of nanodump, a low-level LSASS memory dumping tool.☆16Feb 22, 2026Updated 8 months ago
- A free course on machine learning for cybersecurity and the security of machine learning, with lessons, runnable labs, exercises and quiz…☆23Oct 16, 2026Updated 2 weeks ago
- KiChad — a Codex-integrated downstream of KiCad☆22Jul 24, 2026Updated 3 months ago
- CVE Vulnerability scanner of your software bill of materials (SBOM). ASCII text input.☆17Oct 26, 2020Updated 6 years ago
- InSpec profile to validate an M365 account to the standards of the CIS Microsoft 365 Foundations Benchmark.☆17Dec 14, 2025Updated 10 months ago
- ☆14May 2, 2016Updated 10 years ago
- Frida script that allows to sniff & dump USB traffic on macOS☆16Sep 29, 2024Updated 2 years ago
- A Dumb Windows App With A Sweet Theme Song for Inspecting Bad Clipboard Content☆12Apr 25, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A benchmark for evaluating AI agents on fixing real-world security vulnerabilities.☆15Jun 1, 2026Updated 5 months ago
- An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites…☆18Jan 12, 2023Updated 3 years ago
- Velociraptor ai skills☆18Sep 28, 2026Updated last month
- Command-line tool to identify useragents that bypasses proxy restrictions☆14Sep 29, 2026Updated last month
- A curated, evidence-led guide to AI for security and security for AI. Defensive research, agent safety, MCP security, AI red-teaming and …☆47Oct 25, 2026Updated last week
- ARCHIVED — moved to github.com/GenAI-Security-Project/crosswalk. This copy is frozen as of June 2026 and out of date.☆14Updated this week
- CPAN Security WG website☆10Updated this week
- ☆10Mar 25, 2025Updated last year
- RingKiller — BYOD PoC for vulnerable driver DCRCVDrv.sys. Abuses IOCTL 0x2205C0 to kill arbitrary processes from ring 0 via ZwTerminatePr…☆26Sep 12, 2026Updated last month
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- ☆15May 25, 2020Updated 6 years ago
- Vulnerability scanning with your own scanners and threat feeds, plus a coding agent that opens the fix PR. CLI, GitHub Action, or schedul…☆21Sep 16, 2026Updated last month
- Github page☆18Aug 15, 2025Updated last year
- The easy way to create a working directory with standard report template files for common security scenarios: penetration testing, CTF, t…☆19Jan 5, 2024Updated 2 years ago
- Bulk-run Hayabusa across a folder of triage collections, one run per host, with per-host reports and a cross-host triage dashboard☆18Updated this week
- Setup and authentication skills for CrowdStrike MCP: streamlined connection configuration, OAuth 2.0 token management, and secure access …☆13Aug 27, 2026Updated 2 months ago
- misteye security check skills☆17May 21, 2026Updated 5 months ago
- Local workstation and network security with ContextCypher diagrams, threat analysis and GRC. Use standalone or through scoped MCP, CLI an…☆13Sep 9, 2026Updated last month
- List of ngrok/Cloudflare Tunnel alternatives and other tunneling software and services. Focus on self-hosting.☆11Apr 10, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Some python scripts I wrote that help with various specialized AWS security things☆10Jan 15, 2020Updated 6 years ago
- Kernel-level eBPF sandbox for securing LLM agent tool calls made through the Model Context Protocol (MCP)☆75Oct 6, 2026Updated 3 weeks ago
- A framework for creating COM-based bypasses utilizing vulnerabilities in Microsoft's WDAPT sensors.☆16Apr 4, 2023Updated 3 years ago
- ☆13Aug 31, 2020Updated 6 years ago
- Create and Validate JWT Token using Java JJWT (HMAC and RSA)☆10May 30, 2020Updated 6 years ago
- Get-NetScalerTimeline - Automated File System Timeline Creation for NetScaler ADC/Gateway (DFIR)☆15Oct 4, 2026Updated 3 weeks ago
- Open, practitioner-maintained Detection Engineering curriculum.☆22Oct 25, 2026Updated last week