A
licenseB
qualityB
maintenanceLiving off the Land intelligence for AI agents. GTFOBins, LOLBAS, LOOBins, LOLDrivers, LOLRMM, WADComs, LOLC2 and more — unified into a single MCP server.
59
22
1
MIT
77,049 servers. Updated
Search Relevance ↓
Recent Usage ↓
Date Added ↓
Date Updated ↓
Weekly Downloads ↓
GitHub Stars ↓
Recent GitHub Stars ↓
Matching MCP tools:
Matching MCP Connectors:
io.github.pipeworx-io
com.jojapi
com.appatools
io.github.incwo
"Exploring GraphRAG and HybridRAG" matching MCP servers:
- AlicenseNot gradedqualityCmaintenanceMCP server for Frida dynamic instrumentation, enabling AI agents to enumerate devices/processes, attach, inject JavaScript, hook functions, read memory, and collect results via MCP tools.1MIT
- FlicenseNot gradedqualityBmaintenanceA deliberately vulnerable MCP server demonstrating API key exposure through hardcoding, plaintext logging, and returning secrets to the model, part of the OWASP MCP Top 10 security lab.
- FlicenseNot gradedqualityBmaintenanceExposes AI-augmented network reconnaissance and evasion capabilities as callable FastMCP tools, enabling natural language orchestration of host discovery, service fingerprinting, CVE mapping, and attack chain synthesis.1
- AlicenseNot gradedqualityBmaintenanceEnables AI-powered security scanning of code changes and files through coding assistants, detecting vulnerabilities and providing fixes.MIT
- AlicenseNot gradedqualityDmaintenanceScans MCP servers for security vulnerabilities, prompt injection, and tool poisoning, providing risk scores and protection.4MIT
- AlicenseNot gradedqualityDmaintenanceEnables running Kali Linux security tools and commands in a containerized environment for semi-automated penetration testing, with background job management and out-of-band interaction detection.16Apache 2.0
- AlicenseNot gradedqualityBmaintenanceEnables MCP clients to drive IDA Pro through a stability-hardened server that hosts multiple headless idalib instances, with per-session isolation, configurable HTTP/stdio transports, and API-key authentication.MIT
Gorgon Scoutofficial
FlicenseNot gradedqualityAmaintenanceGorgon Scout is a Windows web-application and API security scanner (DAST). This connector exposes it as MCP tools, so your AI assistant can record a target you are authorised to test, run the scan, stream findings, and produce a report. Capture needs no proxy or certificate setup, and it intercepts HTTP/1.1, HTTP/2, and HTTP/3 (QUIC). Works with the free Claude Desktop plan.- AlicenseNot gradedqualityCmaintenanceEnables automated security code auditing using LLM and MCP, including AST parsing, taint analysis, dataflow tracing, and automated PoC generation for multi-language codebases.MIT
- AlicenseNot gradedqualityCmaintenanceEnables LLM clients like Claude to interact with IDA Pro for binary analysis, decompilation, cross-references, patching, and more via 41 MCP tools, 8 resources, and 7 guided prompts.46MIT
- AlicenseNot gradedqualityFmaintenanceEnables comprehensive security testing and penetration testing through natural language conversations with 92+ tools for reconnaissance, vulnerability assessment, web application testing, OSINT, and reporting. Designed for authorized bug bounty hunting and security assessments.39MIT
- AlicenseNot gradedqualityBmaintenanceA minimal MCP server that exposes Metasploit Framework tools to LLMs via msfrpcd, enabling automated penetration testing and exploitation.1MIT
- AlicenseNot gradedqualityCmaintenanceConnects MCP clients to a Kali Linux terminal for executing security tools and commands, enabling AI-assisted penetration testing and CTF solving.MIT
- AlicenseNot gradedqualityDmaintenanceProvides access to Kali Linux security tools through a Docker container, enabling penetration testing and security assessments via MCP-compatible clients.MIT
- AlicenseNot gradedqualityDmaintenanceA Python MCP server that decompiles Android APK/XAPK/JAR/AAR files and extracts HTTP APIs used by the app.7Apache 2.0
- AlicenseNot gradedqualityAmaintenanceHeadless reverse engineering MCP server integrating IDA Pro for static analysis and x64dbg for dynamic debugging via controlled MCP tools.4GPL 3.0
- AlicenseNot gradedqualityCmaintenanceA JavaScript reverse engineering MCP server that enables AI coding assistants to debug and analyze JavaScript code in web pages.7356Apache 2.0
- AlicenseNot gradedqualityCmaintenanceAn MCP server that integrates multiple security and reconnaissance tools (Nmap, Cariddi, ParamSpider, Metasploit, web scraping) for AI systems, enabling automated network scanning, API discovery, vulnerability testing, and remote access via ngrok.Apache 2.0
- AlicenseNot gradedqualityBmaintenanceAudits HAR captures locally with MCP tools for triage, findings, vendor blast radius, CSP generation, and sanitization—no network calls, redacted by default.5871MIT
