Access comprehensive help for Azure penetration testing tools and view usage examples.
MIT
306,341 tools. Last updated 2026-07-25 07:49
"Resources for security testing, penetration testing, and bug bounty programs" matching MCP tools:
- Find bug bounty techniques, payloads, and bypass methods by searching across multiple knowledge sources.GPL 3.0
- Creates XSS callback payloads that notify your webhook when executed, enabling detection of blind cross-site scripting vulnerabilities in bug bounty testing.MIT
- Access structured bug bounty testing methodologies and checklists. Get step-by-step approaches for testing vulnerability types or general web applications.GPL 3.0
- Retrieve Harrison Richardson's battle-tested bug bounty methodology from the DEFCON 32 workshop. Covers Recon, Injection, Logic, and Cloud pillars for guiding security testing.GPL 3.0
- Provides a recommended SecLists wordlist for a specific bug bounty testing task, such as directory brute-force or subdomain enumeration.GPL 3.0
Matching MCP Servers
- Alicense-qualityCmaintenanceCode-aware browser testing agent — reads your codebase, understands functionality, tests every element, reports with screenshots. Works as MCP server for Cursor/Claude Code or standalone CLI.Last updated1365MIT
- Flicense-qualityDmaintenanceA comprehensive MCP server for automated bug bounty hunting and security reconnaissance, featuring over 28 specialized tools for subdomain discovery, vulnerability scanning, and traffic analysis. It integrates automated scope validation and professional reporting across multiple platforms like HackerOne and Bugcrowd to streamline security testing.Last updated5
Matching MCP Connectors
AI security scanner for Solidity + free CC0 dataset of Sherlock audit-competition acceptance rates.
Security Feeds MCP.
- Extract training patterns from bug bounty writeups to identify vulnerability types and improve security testing methodologies.MIT
- Perform penetration testing on web applications to identify security vulnerabilities using configurable test types and depth levels for comprehensive security assessment.
- Generate a complete bug bounty assessment by combining reconnaissance, vulnerability testing, OSINT gathering, and business logic analysis for targeted domains with prioritized vulnerability types.MIT
- Generate penetration testing strategies by analyzing detected services, technologies, and vulnerabilities to create targeted security assessments.BSD 3-Clause
- Conducts technology-specific penetration testing on web applications to identify security vulnerabilities based on detected technologies like WordPress, Apache, or PHP.BSD 3-Clause
- Retrieve bug bounty programs accessible on HackerOne to identify eligible targets for security testing.
- Perform Active Directory penetration testing to identify security vulnerabilities in domain controllers and network configurations.BSD 3-Clause
- Generate business logic testing workflows for bug bounty programs to identify security vulnerabilities in web applications, APIs, mobile apps, or IoT systems.MIT
- Retrieve all saved testing projects with their base URL, crawl limits, and authentication type. Use this to discover project names required by other testing and auth tools.AGPL 3.0
- Generate realistic INSERT statements for development and testing that respect schema types, constraints, and foreign key relationships without executing.MIT
- List saved eval baselines showing recall queries and expected observations for regression testing.MIT
- Search DuckDuckGo to retrieve titles, URLs, and snippets for documentation, fact-checking, or research in testing workflows.AGPL 3.0
- Retrieve the full certification contract for a capability, including identity, supply chain analysis, security scans, adversarial testing findings, and trust score breakdown.MIT
- Retrieve all consumer Pact contracts for a specific provider version to verify compatibility in bi-directional contract testing.MIT