Access comprehensive help for Azure penetration testing tools and view usage examples.
MIT
603,189 tools. Updated 2026-09-23 15:37
"Resources for security testing, penetration testing, and bug bounty programs" matching MCP tools:
- Filter bug bounty programs by keyword, platform, bbp-only, and public-only to find eligible targets.MIT
- Find bug bounty techniques, payloads, and bypass methods by searching across multiple knowledge sources.GPL 3.0
- Access structured bug bounty testing methodologies and checklists. Get step-by-step approaches for testing vulnerability types or general web applications.GPL 3.0
- Retrieve Harrison Richardson's battle-tested bug bounty methodology from the DEFCON 32 workshop. Covers Recon, Injection, Logic, and Cloud pillars for guiding security testing.GPL 3.0
- Provides a recommended SecLists wordlist for a specific bug bounty testing task, such as directory brute-force or subdomain enumeration.GPL 3.0
Matching MCP Servers
- AlicenseAqualityAmaintenanceCode-aware browser testing agent — reads your codebase, understands functionality, tests every element, reports with screenshots. Works as MCP server for Cursor/Claude Code or standalone CLI.14268 npm5MIT
- AlicenseNot gradedqualityCmaintenanceAutomates bug bounty hunting across Web2 and Web3 platforms, performing recon, vulnerability scanning, Solidity audits, and report generation.MIT
Matching MCP Connectors
AI security scanner for Solidity + free CC0 dataset of Sherlock audit-competition acceptance rates.
Disposable test mailboxes on a real domain: send, receive and assert on real email.
- List bug bounty programs accessible to your researcher account, showing status and reward details for quick review.-
- Retrieve all bug bounty programs you have access to on HackerOne, with automatic pagination to return complete results.-
- List accessible HackerOne bug bounty programs with automatic pagination to retrieve all entries.-
- Find active bug bounty programs by filtering for bounties, fast payments, open scope, or keywords.-
- Perform penetration testing on web applications to identify security vulnerabilities using configurable test types and depth levels for comprehensive security assessment.-
- Generate a complete bug bounty assessment by combining reconnaissance, vulnerability testing, OSINT gathering, and business logic analysis for targeted domains with prioritized vulnerability types.MIT
- Generate penetration testing strategies by analyzing detected services, technologies, and vulnerabilities to create targeted security assessments.BSD 3-Clause
- Conducts technology-specific penetration testing on web applications to identify security vulnerabilities based on detected technologies like WordPress, Apache, or PHP.BSD 3-Clause
- Retrieve bug bounty programs accessible on HackerOne to identify eligible targets for security testing.-
- Perform Active Directory penetration testing to identify security vulnerabilities in domain controllers and network configurations.BSD 3-Clause
- Generate business logic testing workflows for bug bounty programs to identify security vulnerabilities in web applications, APIs, mobile apps, or IoT systems.MIT
- Generate realistic INSERT statements for development and testing that respect schema types, constraints, and foreign key relationships without executing.MIT
- List saved eval baselines showing recall queries and expected observations for regression testing.MIT
- Retrieve the full certification contract for a capability, including identity, supply chain analysis, security scans, adversarial testing findings, and trust score breakdown.MIT
- Push an Agentforce DX test spec to the Salesforce Testing Center for security testing. Requires an authenticated Salesforce org.Cryptographic Autonomy 1.0 (Combined Work Exception)