Offensive MCP server auditor: detects tool poisoning, credential leaks, RCE vectors, SSRF, session hijacking, and supply chain vulnerabilities across stdio, HTTP, and SSE transports.
☆23Mar 12, 2026Updated 4 months ago
Alternatives and similar repositories for MCPScan
Users that are interested in MCPScan are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Execute commands across Windows and Linux systems using multiple RCE methods☆95Mar 2, 2026Updated 4 months ago
- Advanced Recon tool for Bug Bounty and Pentesting☆33Oct 22, 2025Updated 8 months ago
- GromHacks Labs -- The payload lists they don't want you to have. 1,324 injection probes beamed down from the mothership to detect what's …☆36Apr 12, 2026Updated 3 months ago
- Claude Code as C2☆29Jun 16, 2026Updated last month
- Okta Data Collector for BloodHound Community☆15Apr 21, 2026Updated 3 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- AWS services enumerator for penetration testing☆21Nov 11, 2025Updated 8 months ago
- Inject code into .net applications☆14Nov 7, 2018Updated 7 years ago
- shellcode obfuscater and runner in golang☆11Aug 13, 2023Updated 2 years ago
- AzDevRecon is a powerful web-based enumeration tool for offensive security professionals, red teamers, and pentesters targeting Azure Dev…☆30Oct 13, 2025Updated 9 months ago
- 生异形吗？挖掘构建你自己的Java内存马！☆15May 22, 2025Updated last year
- CTF-focused password spray wordlist generator. Perfected for OSCP/PNPT/CPTS. Generates realistic seasonal passwords without the bloat of…☆19Jun 9, 2026Updated last month
- DeepSeek Pentest AI - Burp Suite extension☆64Sep 14, 2025Updated 10 months ago
- Golang Automation Framework for Cobalt Strike using the Rest API☆60Apr 10, 2026Updated 3 months ago
- A Dockerized build pipeline for custom Windows x64 shellcode☆55Dec 12, 2025Updated 7 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Smuggling C2 comms through links previews☆18Jun 17, 2026Updated last month
- contains Evil Files separated from PyHTools project to comply with PyPi's acceptable use policy☆22Jan 8, 2026Updated 6 months ago
- CredsHunter - Credential Hunting scripts for Windows and Linux OS☆157Jul 1, 2026Updated 2 weeks ago
- A fully functional payload management system for adding that extra spice to your web testing.☆13Feb 1, 2026Updated 5 months ago
- a simple powershell wrapper to automate checking a user's access around the network☆14Dec 5, 2023Updated 2 years ago
- Interract with Microsoft SQL Server (MS SQL | MSSQL) servers and their linked instances in restricted environments, without the need for …☆74Jun 12, 2026Updated last month
- A collection of useful API endpoints for security operators and administrators☆16Jan 8, 2026Updated 6 months ago
- Golang eBPF RASP☆10Jul 19, 2023Updated 3 years ago
- Living Off The Land API☆61Feb 2, 2026Updated 5 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- AI-powered malware traffic analysis and network forensics via the Model Context Protocol☆18May 27, 2026Updated last month
- 近年来容器安全相关论文收集整理☆15May 26, 2023Updated 3 years ago
- Pure PowerShell port of PassTheCert tool to authenticate to an LDAP/S server with a certificate through Schannel☆18May 22, 2026Updated last month
- CVE-2023-21742 Poc☆14Apr 7, 2023Updated 3 years ago
- Given a list of domains and known IP and buckets that are owned, which might be susceptible to domain hijacking?☆16Sep 20, 2024Updated last year
- Live runtime audit for installed Android apps. Runs on the rooted phone, serves a browser dashboard.☆28May 23, 2026Updated last month
- AWS SSO Device-Code Phishing Toolkit for Red / Purple Teams☆23Mar 10, 2026Updated 4 months ago
- Container Virtual Service☆13Aug 10, 2022Updated 3 years ago
- Golang Cobalt Strike Rest API Client☆19Apr 10, 2026Updated 3 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Claude Code Remote Code Execution☆15Feb 3, 2026Updated 5 months ago
- The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters☆14Feb 10, 2022Updated 4 years ago
- 12-week Geekwise course on web application security and hardening.☆17Mar 19, 2020Updated 6 years ago
- DevSecOps for the AI-era CI/CD pipeline. Catches the bugs your AI coding assistant introduces — before they reach production.☆20Jul 14, 2026Updated last week
- ⚡ SheetStrike - Weaponize Excel files for red team operations. Inject stealthy tracking pixels and NTLMv2 hash capture payloads into XLSX…☆22Dec 23, 2025Updated 6 months ago
- Tailscale/Headscale C2 profile and agent for Mythic☆25Mar 14, 2026Updated 4 months ago
- A Python based tool to convert custom queries from Legacy BloodHound to BloodHound CE format, with the option to directly upload them to …☆38Oct 1, 2025Updated 9 months ago