Discover parameters, endpoints, and forms from a target's HTML and JavaScript to map the attack surface before probing with http_send or intruder.
MIT
606,759 tools. Updated 2026-09-24 10:59
"Understanding Attack Surface Management" matching MCP tools:
- Fingerprint web frameworks in source code (Flask, FastAPI, Django) and locate the request-handling attack surface.MIT
- List unique endpoints from Burp traffic with method, path, parameters, and hit counts to reveal attack surface.MIT
- Compute risk scores, map attack surfaces, prioritize objectives, compare environments, or generate attack timelines for cybersecurity environments.MIT
- Retrieve comprehensive penetration test details including status, findings summary, executive overview, attack surface map, and STRIDE threat model analysis.MIT
- Retrieve attack surface rules from Cortex XSIAM. Filter by category, priority, or status, and sort results to pinpoint relevant security configurations.Apache 2.0
Matching MCP Servers
- AlicenseNot gradedqualityAmaintenancePassive external attack-surface mapping server that discovers subdomains, DNS records, TLS posture, HTTP headers, and registration data via public sources like CT logs, Shodan, and RDAP/WHOIS, enabling security reconnaissance without active scanning.62 npm1Apache 2.0
- AlicenseAqualityCmaintenanceA minimal MCP server that exposes Gemini's web and multimodal understanding (video, audio, document, image) through five dedicated tools.51MIT
Matching MCP Connectors
Statically audits MCP tool surfaces for token cost, schema quality, and design issues.
UK pest, disease, and weed management — symptom diagnosis, IPM, approved products
- Retrieve Atomic Red Team adversary simulations for a MITRE ATT&CK technique, including commands, cleanup, platforms, and arguments, to map the full attack surface and guide detection engineering.-
- Retrieve a company's attack surface result by its ID. Use path parameters, filters, and pagination to get the specific data you need.MIT
- Launch an external recon assessment to discover and evaluate your attack surface. Identify exposed assets and potential risks through an automated ASM scan.MIT
- Enumerate the attack surface of an AWS environment to identify potential security risks.MIT
- Crawl a web target and map its attack surface for security assessment. Set target URL and crawl depth.MIT
- Remove a company's attack surface domain by its ID to eliminate outdated or incorrect entries from vulnerability management.MIT
- Retrieve attack surface findings by supplying route IDs, filters, and pagination to identify exposed assets and vulnerabilities, enabling targeted remediation.MIT
- Update attack surface domain settings by providing route IDs, query filters, and request headers. This modifies domain records in ConnectSecure for accurate vulnerability management.MIT
- Retrieve hourly or daily counts of unique IPs matching a GNQL query to analyze scanning and attack activity trends over a time range.MIT
- Displays attack volume over time with hourly or daily buckets. Filter by protocol, country, or port to identify trends and spikes in threat activity.MIT
- Quantify the danger of running outdated software by obtaining a 0–100 EOL Risk Score™ with breakdowns for end-of-life recency, attack surface, CISA KEV exposure, and extended support.MIT
- Retrieve detailed threat intelligence for a callback IP, including attack stage, scanner associations, and malware files.MIT
- Detect coordinated attack patterns across multiple tenants. Returns campaign details when an ongoing attack campaign is identified.MIT
- Submit a chain of node descriptions representing an attack path to be energy-scored and forwarded for triage.Apache 2.0
- Retrieve all raw attack paths from a specified branch in InfraDB, enabling review of pre-triage JEPA outputs for infrastructure vulnerabilities.Apache 2.0