http-mcp-bridge

HTTP MCP Bridge This project implements an HTTP server that acts as a bridge between HTTP/1.1 requests and a remote MCP server, using the mcp python library GitHub. The main purpose of this initiative is to be able to use HTTP security tools to test remote MCP servers using the remote transport...

Security-Detections-MCP

Security Detections MCP An MCP Model Context Protocol server that lets LLMs query a unified database of Sigma , Splunk ESCU , Elastic , KQL , Sublime , and CrowdStrike CQL security detection rules. New here? Start with theSetup Guide -- covers macOS, Windows WSL & native, and Linux step by step...

T-MAP

T-MAP: Red-Teaming LLM Agents with Trajectory-aware Evolutionary Search T-MAP is a trajectory-aware evolutionary search framework for red-teaming LLM agents over MCP servers. It iteratively generates and mutates adversarial prompts guided by execution trajectories, mapping the agent's vulnerabili...

noapi-google-search-mcp

noapi-google-search-mcp [email protected] If you want to support noapi-google-mcp or gpt-oss-20B/120B-Vision and other open source models in the pipeline please add to my GPU compute fund: around $3000 are needed. If you find this useful, consider supporting continued development and new...

jebmcp

A quick-and-dirty MCP server&Plugin for JEB Pro. Tested on Cline & Cursor & RooCode. Reference: https://github.com/mrexodia/ida-pro-mcp Installation Requirements Python = 3.11 uv: https://docs.astral.sh/uv/getting-started/installation/ Usage COPY the src/jebmcp/MCP.py to...

mcpsafetywarden

MCP safety warden is a proxy server that wraps any MCP server and adds behavioral profiling, security scanning, risk gating, and safe execution to its tools. Contents Overview Prerequisites Installation Configuration MCP Integration CLI Reference Auxiliary Integrations Development Testing Fu...

autopentest-ai

AutoPentest An agentic pentesting MCP server that automates web application penetration testing using the full OWASP Web Security Testing Guide and PortSwigger Web Security Academy technique references. Point it at a target — it crawls your app, maps every endpoint, then spawns role-specialized...

jshookmcp

@jshookmcp/jshook A search-first, profile-aware reverse-engineering workspace for AI agents. Hook the page, capture the network, deobfuscate the bundle, disassemble the WASM, instrument the process — and let one MCP server keep the whole attack surface in reach without drowning the model in...

super-trouper

Super Trouper An MCP server for the Frida reverse engineering toolkit. Super Trouper runs an MCP server over STDIO that exposes Frida capabilities as tools for coding agents. It can connect to local, USB, and remote devices; inspect applications and processes; manage process sessions; and load,...

processhacker-mcp

processhacker mcp this is dynamic mcp server for runtime analysis and process hacking. it is like processhacker but for ai agents. setup 1. open folder in visual studio it has cmakelists 2. build all ctrl+shift+b 3. it makes ProcessHackerMCP.exe and extensions/ folder. 4. run exe. it communicates...

MCPwnfluence

MCPwnfluence — CVE-2026-27825 & CVE-2026-27826 Two critical vulnerabilities in mcp-atlassian, one of the most popular MCP servers in the ecosystem 4.4K+ GitHub stars, 4M+ downloads. Discovered by the team at Pluto Security. The Vulnerabilities CVE| CVSS| Type| Description ---|---|---|---...

rikune

Rikune Rikune is an MCP server for reverse engineering Windows executables and related binary formats. It combines sample intake, static triage, Ghidra-assisted function recovery, plugin-driven specialist tooling, artifact management, and optional isolated Windows runtime execution behind a Model...

CVE-2026-33980

CVE-2026-33980 — KQL Injection in adx-mcp-server via tablename parameter Severity : High CVSS 8.3 CWE : CWE-943 — Improper Neutralization of Special Elements in Data Query Logic Affected : adx-mcp-server = 1.1.0 Advisory : GHSA-vphc-468g-8rfp NVD : https://nvd.nist.gov/vuln/detail/CVE-2026-33980...

agentsid-scanner

AgentsID Scanner The Lighthouse of agent security. Scan any MCP server. Get a security report card. Your MCP server exposes tools to AI agents. How secure is it? Most MCP servers ship with no authentication, no per-tool permissions, no input validation, and tool descriptions vulnerable to prompt...

SkillsGuard

Support Development If SkillsGuard protects your pipeline, consider supporting ongoing research and new detection rules. ETH Donation Wallet 0x11282eE5726B3370c8B480e321b3B2aA13686582 Scan the QR code or copy the wallet address above. Static security scanner for AI agent skill packages. Detects...

jadx-ai-mcp

JADX-AI-MCP Part of Zin MCP Suite ⚡ Fully automated MCP server + JADX plugin built to communicate with LLM through MCP to analyze Android APKs using LLMs like Claude — uncover vulnerabilities, analyze APK, and reverse engineer effortlessly. ⭐ Contributors Thanks to these wonderful people for thei...

osint-tools-mcp-server

🔍 OSINT Tools MCP Server A comprehensive MCP server that exposes multiple OSINT tools to AI assistants like Claude. This server allows AI to perform sophisticated reconnaissance and information gathering tasks using industry-standard OSINT tools. 🛠️ Available Tools 🔍 Sherlock - Username Search...

ghostsplice

GhostSplice: cross-channel trust fragmentation attack PoC Proof-of-concept code for GhostSplice , an attack from the ASSET Research Group. The full write-up is "The AI refused to steal the secrets. So we handed it a form.". The idea in plain words AI coding assistants like Cursor, VS Code with...

CVE-2026-23744

CVE-2026-23744 Exploit to MCPJam Inspector Install libraries with: pip install -r requirements.txt - use python CVE-2026-23744 --help to info MCPJam inspector is the local-first development platform for MCP servers. The Latest version Versions 1.4.2 and earlier are vulnerable to remote code...

otto-support

Otto Support Customer support MCP server for AI coding assistants. One Go binary, tiered authentication, 19 tools across 4 role levels. Built with mcp-go. Quick Start Option A: Docker container recommended Run everything in an isolated container. Claude Code is pre-installed and the MCP server...