agent-scan

Snyk Agent Scan Discover and scan agent components on your machine for prompt injections and vulnerabilities including agents, MCP servers, skills. Note: We don't publish an npm package for Agent Scan. Install it via uvx or as a standalone binary. Note: CLI output is experimental and subject to...

binary-ninja-headless-mcp

Binary Ninja Headless MCP A headless Binary Ninja server that speaks MCP Model Context Protocol, giving AI agents full access to deep reverse-engineering workflows — disassembly, IL, patching, types, xrefs, and more — without a GUI. Designed to run in the same Docker container as the agent runtim...

firefox-devtools-mcp

Firefox DevTools MCP Model Context Protocol server that lets AI agents use Firefox. It has two main use cases: Agentic browsing : the agent uses the browser for regular tasks, such as reading pages, filling forms and going through multi-step flows on websites. Agent-assisted web development : the...

IDAssistMCP

IDAssistMCP !IMPORTANT Planned archival: IDAssistMCP is planned for archival as IDA Pro introduces a bundled native MCP server. Native support removes the need to maintain a separate MCP integration and keeps it aligned with IDA Pro itself. Please use IDA Pro's native MCP server once it is...

windbg-mcp

WinDbg MCP An MCP Model Context Protocol server that exposes every pybag Windows debugger function as a native MCP tool. It gives any MCP-compatible client Claude Desktop, Claude Code, Cowork, OpenAI Codex CLI, Cursor, and custom agents full control over user-mode processes, kernel sessions, and...

agent-opfor

Open-source adversary emulation for AI agents, LLM apps, and MCP servers. Test your AI like a real attacker would — from your CLI, your IDE, or a browser extension that anyone on your team can use. Website · Docs · GitHub · Browser Extension · Discord OPFOR is short for Opposition Force — a...

semgrep

Code scanning at ludicrous speed. Semgrep is a fast, open-source, static analysis tool that searches code, finds bugs, and enforces secure guardrails and coding standards. Semgrep supports 30+ languages and can run in an IDE, as a pre-commit check, and as part of CI/CD workflows. Semgrep is...

mcp-xray

MCP X-Ray !NOTE Looking to secure AI agent skills? Check out Skill X-Ray, an open-source static security scanner that analyzes skill packages for malicious or risky behavior before installation, without executing them. Overview MCP X-Ray is a unified open-source security scanning and penetration...

rikune

Rikune Rikune is an MCP server for reverse engineering Windows executables and related binary formats. It combines sample intake, static triage, Ghidra-assisted function recovery, plugin-driven specialist tooling, artifact management, and optional isolated Windows runtime execution behind a Model...

aimap

AIMap Internet-scale discovery and security testing platform for exposed AI agent infrastructure. AIMap finds, fingerprints, and security-tests publicly exposed AI endpoints — MCP servers, Ollama instances, vLLM/LiteLLM proxies, LangServe chains, Gradio apps, ComfyUI nodes, and more. Think Shodan...

threat-modeling-mcp-server

Threat Modeling MCP Server A Model Context Protocol MCP server for comprehensive threat modeling with guided code validation. Table of Contents Overview Quick Start Prompts Key Features Prerequisites Installation Running with Kiro CLI Output File Management Quick Reference Tools Overview Threat...

pentestagent

PentestAgent AI Penetration Testing https://github.com/user-attachments/assets/a67db2b5-672a-43df-b709-149c8eaee975 Requirements Python 3.10+ API key for OpenAI, Anthropic, or other LiteLLM-supported provider Install Clone git clone https://github.com/GH05TCREW/pentestagent.git cd pentestagent...

mcp-shark

mcp-shark Security scanner for AI agent tools — built for security and platform engineers working with MCP in the IDE. Run a local static scan over MCP IDE configs and embedded tool metadata: 41 rules including AAuth visibility, toxic-flow heuristics, and SARIF / HTML / JSON reports. There is no...

regenerator2000

Regenerator 2000 Regenerator 2000 is an interactive 6502 disassembler for Commodore 8-bit machines. It is inspired by the original Regenerator. 🕹️ Manual Analysis — Use the keyboard-centric terminal interface to navigate code, define data regions, label subroutines, add comments, and refine your...

noapi-google-search-mcp

noapi-google-search-mcp [email protected] If you want to support noapi-google-mcp or gpt-oss-20B/120B-Vision and other open source models in the pipeline please add to my GPU compute fund: around $3000 are needed. If you find this useful, consider supporting continued development and new...

YourMemory

YourMemory Your AI has the memory of a goldfish. Not anymore. Persistent, self-improving memory for AI agents — built on the science of how humans remember. ▶ Try the live interactive demo · Website · Benchmarks The problem Every morning your AI agent treats you like a stranger. Same context...

Reversecore_MCP

Reversecore MCP AI-Powered Reverse Engineering & Security Analysis via Model Context Protocol An MCP server that gives AI assistants like Claude and Cursor the ability to perform reverse engineering, malware analysis, vulnerability research, digital forensics, and source code auditing through...

burp-ai-agent

Custom AI Agent The bridge between Burp Suite and modern AI. A note on the name: This extension is published as Custom AI Agent formerly Burp AI Agent. It was renamed to comply with PortSwigger's BApp Store naming requirements and to avoid confusion with Burp Suite's built-in Burp AI provider. Th...

nightingale

Open-source alerting for your existing stack Quick start · Documentation · Download · Releases · Community English | 中文 Nightingale brings alert rules, event processing, and notification routing into one place. Connect Prometheus, VictoriaMetrics, Elasticsearch, Loki, ClickHouse, and other data...

smart-tree

🌳 Smart Tree - The Smart Treehouse: Cyber-Botanical Dashboard & Agent-Agnostic Hooks! 🌐 Smart Tree is a blazingly fast, AI-friendly directory visualization tool that's 10-24x faster than traditional tree. Now with Security Scanner for supply chain attack detection, Aye Consciousness preservation,...