一个为主流渗透测试工具打造的MCP服务器集合。 | A collection of Model Context Protocol servers for popular security tools like SQLMap, FFUF, NMAP, Masscan and more. Integrate security testing and penetration testing into AI workflows.
☆41Jun 22, 2025Updated last year
Alternatives and similar repositories for mcp-for-security-python
Users that are interested in mcp-for-security-python are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- FuzzHound是一款专为 API 安全测试设计的智能 Fuzz 工具，支持 Swagger/OpenAPI 文档自动解析，提供多种 Fuzz 模式和漏洞检测能力。像猎犬一样嗅探 API 中的安全漏洞！☆27Apr 21, 2026Updated 6 months ago
- 一个用于 AI 驱动的渗透测试竞赛的**模型上下文协议 (MCP)** 服务器。该工 具提供了一个完整的 API 接口，使 LLM 能够自主参与 CTF 挑战。☆94Dec 3, 2025Updated 10 months ago
- Kali AI Pentest MCP tools 渗透测试工具集☆70Jun 7, 2026Updated 4 months ago
- Jetty&JDK 均为高版本下的内存马注入☆17Sep 3, 2025Updated last year
- burp被动插件扫反射xss☆13Nov 29, 2023Updated 2 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- ARK C2 by Zypheron: Speed · Stealth · Control. AI-native C2 for authorized red teaming. Human-in-the-loop, modular, cross-platform.☆14Oct 23, 2026Updated last week
- 适用于在linux环境下快速调用hashcat对WPA握手包进行常用的暴力破解测试☆13Sep 29, 2025Updated last year
- 可用于AI进行自动目录扫描的MCP辅助工具☆36Apr 16, 2025Updated last year
- 渗透测试学习笔记☆22Oct 13, 2025Updated last year
- 瞎越是一款 Burp Suite 的安全插件，主要用于测试 Web 越权、未授权的网络安全漏洞 。☆11Jun 13, 2024Updated 2 years ago
- An AI-driven remote command execution platform built with Rust. VectorShell bridges AI agents and remote targets — run shell commands, ma…☆18Jun 24, 2026Updated 4 months ago
- MCP for Security: A collection of Model Context Protocol servers for popular security tools like SQLMap, FFUF, NMAP, Masscan and more. In…☆628Mar 30, 2026Updated 6 months ago
- Kali MCP 是一 套 LLM 自主多智能体渗透系统，依据「向量化知识库 + 联网搜索 + 自身能力」逐步动态规划下一步☆80Aug 17, 2026Updated 2 months ago
- arl灯塔自动化扫描工具☆55Feb 24, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A CLI that extracts the useful structure from source files: signatures, imports, types, variables, comments, and Markdown sections.☆44Jul 15, 2026Updated 3 months ago
- 安全人员小助手油猴插件☆13Aug 29, 2023Updated 3 years ago
- Burp插件 TLA Watcher：分为两个模块：流量管理模块、扩展功能模块（脆弱风险检测）☆39Nov 13, 2025Updated 11 months ago
- 本项目是一个自动化0day漏洞监控系统，通过GitHub Actions定时抓取互联网最新漏洞情报，自动翻译并生成结构化报告。系统每天UTC时间9:00自动运行，也可手动触发。☆34Updated this week
- Google 、Baidu、Bing、Github Hack tools☆17Nov 3, 2021Updated 4 years ago
- 一款集合了常见的漏洞练习平台，利用Ai对靶场进行自动化渗透测试！☆67Oct 22, 2025Updated last year
- UniMCPSim是一个通用的MCP（Model Context Protocol）模拟器，可以动态模拟各种产品的API接口，为开 发和测试提供便利。☆17Apr 25, 2026Updated 6 months ago
- 一键安装CTF工具☆21May 8, 2026Updated 5 months ago
- SOAR MCP Server 是一个创新的安全编排平台集成解决方案，通过 Model Context Protocol 将 SOAR (Security Orchestration, Automation and Response) 能力直接集成到各种 AI 客户端中，包…☆17Apr 26, 2026Updated 6 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- GitHub Advisory Database Skills builder☆74Mar 14, 2026Updated 7 months ago
- 一款用Go语言编写的数据库自动化提权工具，支持Mysql、MSSQL、Postgresql、Oracle、Redis数据库提权、命令执行、爆破以及ssh连接☆17Feb 19, 2023Updated 3 years ago
- 基于load data逻辑漏洞的Mysql蜜罐☆24Jul 14, 2025Updated last year
- JavaScript Change Monitor for Bug Bounty Hunting - High-performance Go rewrite☆20Nov 9, 2025Updated 11 months ago
- 一款轻量级 Burp Suite 被动扫描探测SQLi XSS SSTI漏洞插件☆90Mar 18, 2026Updated 7 months ago
- ChenYanXi是一个基于 Python 编写的多功能高级壳体生成器，专为研究数据保护、反调试与内存加载执行机制而设计。它集成了 多层数据加密（AES/DES + zlib）、动态密钥派生、控制流混淆、反沙箱与调试器检测、注册表伪装 以及 无文件内存执行 等多种防护与隐藏…☆62Jun 29, 2025Updated last year
- 这是一个用于Burp Suite的文件上传漏洞自动化fuzz测试插件。该插件提供了多种绕过技术，包括WAF绕过、内容类型绕过、文件扩展名绕过等。☆45Aug 6, 2025Updated last year
- ☆16Feb 18, 2023Updated 3 years ago
- 雾刃-AI自动化渗透测试平台(概念验证版)☆20Oct 17, 2026Updated last week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- AegisX 是一款基于 **LangGraph** 和 **LLM (大语言模型)** 构建的下一代 Web 安全自动化渗透测试代理系统。它通过多智能体协作（Multi-Agent Collaboration）和反馈驱动的策略进化，模拟资深安全专家的思维逻辑，对目标进行深…☆21Jan 21, 2026Updated 9 months ago
- Turacos 是一款专业的多数据库安全评估工具，支持 PostgreSQL、MySQL、Redis、MSSQL 等多种数据库的后渗透操作。 为安全研究人员提供系统化、模块化的数据库安全测试能力，助力企业进行安全评估与漏洞验证。☆83Oct 14, 2026Updated 2 weeks ago
- 本项目是一个插件项目，用于演示插件的使用方法 快速打造自己的谷歌插件该项目使用 vue2.0 + webpack4.0 + less + es6 + vue-router + vuex + axios + element-ui + chrome-plugin 等其他插件开发…☆12Oct 18, 2023Updated 3 years ago
- 本项目集成了13W文件泄露,API接口等，提供安服仔日常检测信息泄露，未授权等。☆28May 5, 2023Updated 3 years ago
- Burpsuite - Js Route Scan 正则匹配获取响应中的路由进行被动探测与递归目录探测的burp插件☆376Jun 7, 2024Updated 2 years ago
- EZ ServiceScan - 强大且niubility的网络服务扫描工具☆26May 15, 2025Updated last year
- 在浏览器中运行 Pi Agent。基于 Pi Durable，支持书签注入、Chrome 扩展、持久化会话和页面操作。Run Pi Agent in your browser with bookmarks or a Chrome extension.☆34Updated this week