Skip to main content
Glama
laurentvv

pentest-suite

by laurentvv
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Python
Local

Related Servers

Alternatives to pentest-suite

No user-submitted related servers found.

    Related Servers

    • mcp-shodan

      Ngoc8735
      A
      license
      Not graded
      quality
      A
      maintenance
      Enables AI agents to search internet-connected devices, perform IP and hostname reconnaissance (open ports, banners, TLS certificates, DNS records), and retrieve CVE/CPE vulnerability intelligence including CVSS, EPSS, and KEV status. Supports both stdio and HTTP streaming transports and works with Claude Code, Codex, Gemini CLI, and Claude Desktop.
      MIT

    • mcp-shodan

      Alessia8476
      F
      license
      Not graded
      quality
      A
      maintenance
      Enables AI agents to search internet-connected devices, perform IP and host reconnaissance with port, banner and TLS data, run DNS lookups, and retrieve CVE/CPE vulnerability intelligence including CVSS, EPSS and KEV status. It supports credit-aware queries with both stdio and HTTP streaming transports for clients like Claude Code, Codex, Gemini CLI and Claude Desktop.
      -

    • mcp-shodan

      bshah04
      A
      license
      Not graded
      quality
      A
      maintenance
      Enables AI agents to perform internet reconnaissance through the Shodan and CVEDB APIs — searching internet-connected devices, inspecting host ports, banners, TLS certificates and DNS records, and pulling CVE, CPE, EPSS and KEV vulnerability intelligence. Supports both stdio and HTTP streaming transports for use with Claude Code, Codex, Gemini CLI and Claude Desktop.
      MIT

    • verdex

      Yilanchia
      A
      license
      Not graded
      quality
      B
      maintenance
      Exposes read-only local analysis tools for source auditing, web traffic review, binary reverse engineering, exploit scaffolding, OSINT, and reporting via JSON-RPC over stdio, enabling LLMs to orchestrate evidence-based security workflows without executing targets or sending network requests.
      1
      MIT

    • mcp-shodan

      ferreira04707
      A
      license
      Not graded
      quality
      A
      maintenance
      Enables AI agents to perform internet-facing reconnaissance and vulnerability research by looking up open ports, banners and TLS details for IPs, searching devices with Shodan query syntax, resolving DNS records in batch, and retrieving CVE/CPE intelligence with CVSS, EPSS and KEV status. Tools are read-only, credit-aware, and exposed over stdio or HTTP streaming.
      MIT

    • cybermes-mcp

      Ridlo543
      A
      license
      Not graded
      quality
      B
      maintenance
      Enables AI coding assistants and IDEs to run authorized offensive-security workflows over Model Context Protocol, including scope validation, reconnaissance, HTTP probing, secret and vulnerability scanning, playbook lookup, evidence management, and report generation.
      Apache 2.0
    Deploy Server
    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    TDQS

    B3.1/5.0

    Scored across 5 tools

    Disambiguation4/5

    Each tool targets a fairly distinct recon phase (HTTP probe, port scan, path discovery, template checks, vuln lookup). Minor overlap exists between probe and ports since both grab banners, and 'tmpl' is vague without reading its description.

    Naming Consistency4/5

    All five names are single lowercase noun-like tokens following a consistent terse style. They deviate from a verb_noun convention, but the pattern itself is uniform and predictable.

    Tool Count4/5

    Five tools is a lean but reasonable set for a recon/vuln-detection suite, and each earns its place. It's on the thin side for a 'pentest suite' but not mismatched.

    Completeness3/5

    Covers host probing, port scanning, dir discovery, template detections, and KEV lookup, but notable gaps remain: no subdomain/host enumeration, no exploitation/validation step, and no reporting or result aggregation.

    Maintenance

    ActivityMaintained
    ResponsivenessNo issues

    Resources