Penetration Testing MCP MCP Servers

MCP servers wrapping specialized security testing and reconnaissance tools (port scanning, web fuzzing, vulnerability scanning, OSINT, network exploitation). Does NOT include general security monitoring, threat intelligence platforms, or vulnerability management systems without active exploitation capabilities.

There are 50 penetration testing mcp servers tracked. The highest-rated is schwarztim/sec-netexec-mcp at 35/100 with 2 stars.

Get all 50 projects as JSON

curl "https://pt-edge.onrender.com/api/v1/datasets/quality?domain=mcp&subcategory=penetration-testing-mcp&limit=20"

Open to everyone — 100 requests/day, no key needed. Get a free key for 1,000/day.

# Server Score Tier
1 schwarztim/sec-netexec-mcp

MCP server for NetExec - Network execution tool for penetration testing
35
Emerging
2 schwarztim/sec-amass-mcp

MCP server for OWASP Amass - Subdomain enumeration and attack surface mapping
22
Experimental
3 schwarztim/sec-nmap-mcp

MCP server for nmap - Network scanner and security auditing
22
Experimental
4 schwarztim/sec-wireshark-mcp

MCP server for Wireshark/tshark - Network protocol analyzer
22
Experimental
5 schwarztim/sec-beef-xss-mcp

MCP server for BeEF - Browser Exploitation Framework
21
Experimental
6 schwarztim/sec-masscan-mcp

MCP server for masscan - Fast port scanner
21
Experimental
7 schwarztim/sec-httpx-mcp

MCP server for httpx - HTTP toolkit for web reconnaissance
21
Experimental
8 schwarztim/sec-sqlmap-mcp

MCP server for sqlmap - SQL injection tool
21
Experimental
9 schwarztim/sec-veil-evasion-mcp

MCP server for Veil - Payload generator and AV evasion
21
Experimental
10 schwarztim/sec-nikto-mcp

MCP server for Nikto - Web server vulnerability scanner
21
Experimental
11 schwarztim/sec-impacket-mcp

MCP server for Impacket - Network protocol toolkit for penetration testing...
21
Experimental
12 schwarztim/sec-subfinder-mcp

MCP server for subfinder - Subdomain discovery
21
Experimental
13 schwarztim/sec-powershell-empire-mcp

MCP server for PowerShell Empire - Post-exploitation framework
21
Experimental
14 schwarztim/sec-proxychains-mcp

MCP server for Proxychains - Route commands through proxy chains via SSH
21
Experimental
15 schwarztim/sec-nuclei-mcp

MCP server for Nuclei - Vulnerability scanner integration for AI assistants...
21
Experimental
16 schwarztim/sec-censys-mcp

MCP server for Censys - Internet scan search
21
Experimental
17 schwarztim/sec-testssl-mcp

MCP server for testssl.sh - SSL/TLS testing
21
Experimental
18 schwarztim/sec-spiderfoot-mcp

MCP server for SpiderFoot - OSINT automation
21
Experimental
19 schwarztim/sec-enum4linux-mcp

MCP server for enum4linux - SMB enumeration tool for Windows/Samba systems...
21
Experimental
20 schwarztim/sec-rubeus-mcp

MCP server for Rubeus - Kerberos abuse toolkit for security testing
21
Experimental
21 sjinks/wpscan-mcp-server

MCP Server for the WPScan (wpscan.com) API
21
Experimental
22 schwarztim/sec-dirb-mcp

MCP server for dirb - Web content scanner
21
Experimental
23 schwarztim/sec-hydra-mcp

MCP server for THC-Hydra - Password brute-forcer for authorized penetration testing
21
Experimental
24 schwarztim/sec-evil-winrm-mcp

MCP server for Evil-WinRM - WinRM shell for Windows penetration testing
21
Experimental
25 schwarztim/sec-maltego-mcp

MCP server for Maltego - OSINT visualization and transform automation
21
Experimental
26 schwarztim/sec-burpsuite-mcp

MCP server for Burp Suite - Web application security testing
21
Experimental
27 schwarztim/sec-ldapdomaindump-mcp

MCP server for ldapdomaindump - Active Directory LDAP enumeration for...
21
Experimental
28 schwarztim/sec-gobuster-mcp

MCP server for gobuster - Directory brute-forcer
21
Experimental
29 schwarztim/sec-john-the-ripper-mcp

MCP server for John the Ripper - Password cracking and security auditing via...
21
Experimental
30 schwarztim/sec-responder-mcp

MCP server for Responder - LLMNR/NBT-NS poisoner for authorized penetration testing
21
Experimental
31 schwarztim/sec-seclists-mcp

MCP server for SecLists - Security wordlists
21
Experimental
32 schwarztim/sec-theharvester-mcp

MCP server for theHarvester - Email/subdomain harvester for OSINT reconnaissance
21
Experimental
33 schwarztim/sec-smbmap-mcp

MCP server for smbmap - SMB share enumeration
21
Experimental
34 schwarztim/sec-shodan-mcp

MCP server for Shodan - IoT search engine
21
Experimental
35 schwarztim/sec-feroxbuster-mcp

MCP server for feroxbuster - Fast content discovery
21
Experimental
36 schwarztim/sec-ligolo-ng-mcp

MCP server for Ligolo-ng - Tunneling and pivoting
21
Experimental
37 schwarztim/sec-chisel-mcp

MCP server for Chisel - TCP/UDP tunneling over HTTP/WebSocket
21
Experimental
38 schwarztim/sec-certipy-mcp

MCP server for Certipy - AD CS attack tool
21
Experimental
39 schwarztim/sec-hashcat-mcp

MCP server for hashcat - GPU password recovery
21
Experimental
40 schwarztim/sec-ffuf-mcp

MCP server for ffuf - Fast web fuzzer
21
Experimental
41 schwarztim/sec-wfuzz-mcp

MCP server for wfuzz - Web fuzzer for security testing
21
Experimental
42 schwarztim/sec-recon-ng-mcp

MCP server for recon-ng - OSINT framework
21
Experimental
43 schwarztim/sec-wpscan-mcp

MCP server for WPScan - WordPress security scanner
21
Experimental
44 schwarztim/sec-social-engineer-toolkit-mcp

MCP server for SET - Social Engineering Toolkit
21
Experimental
45 schwarztim/sec-mimikatz-mcp

MCP server for Mimikatz - Credential extraction and security assessment tool
21
Experimental
46 schwarztim/sec-havoc-c2-mcp

MCP server for Havoc - Modern C2 framework for red team operations
21
Experimental
47 schwarztim/sec-aircrack-ng-mcp

MCP server for aircrack-ng - WiFi security auditing
21
Experimental
48 schwarztim/sec-crackmapexec-mcp

MCP server for CrackMapExec - Network pentesting
21
Experimental
49 schwarztim/sec-sliver-c2-mcp

MCP server for Sliver C2 - Adversary emulation framework integration for AI...
21
Experimental
50 schwarztim/sec-bloodhound-mcp

MCP server for BloodHound - AD attack path mapping
21
Experimental

Comparisons in this category

sec-netexec-mcp and sec-nmap-mcp (35 vs 22) sec-netexec-mcp and sec-masscan-mcp (35 vs 21) sec-netexec-mcp and sec-testssl-mcp (35 vs 21) sec-netexec-mcp and sec-proxychains-mcp (35 vs 21) sec-netexec-mcp and sec-powershell-empire-mcp (35 vs 21) sec-nmap-mcp and sec-masscan-mcp (22 vs 21)