# Penetration testing

An MCP demonstration project for Mythic that allows LLMs to perform penetration testing on our behalf.

Kali MCP Server is a lightweight API bridging tool that connects MCP clients to the Kali Linux terminal, enabling AI - assisted penetration testing and CTF challenge automation.

HackerMCP is a module designed for AI assistants to access and utilize common penetration testing and security tools such as Nmap and Metasploit Framework, providing a simple interface to enhance the security testing capabilities of AI systems.

AutoPentest is an automated Web application penetration testing server based on the MCP protocol, integrating the OWASP WSTG and PortSwigger attack technique guides. It realizes a seven - stage automated testing through role - based agents (scout, analyst, exploiter, reporter), including 109 tests, 31 attack techniques, 27 security tools, and the ability to bypass WAF adaptively, ensuring zero false positives and evidence - driven vulnerability discovery.

An MCP server for AI-driven penetration testing competitions, providing functions such as challenge management, knowledge base, persistent Kali container, and attempt history, and supporting integration of multiple protocols.

An MCP server based on containerized Kali Linux that provides the ability to execute commands for penetration testing and security research tools, supporting background task management and interactive vulnerability detection.

Web Application Penetration Testing MCP is a comprehensive tool focusing on the analysis of business logic security vulnerabilities. Through systematic crawling and analysis, it can identify security issues that standard scanners cannot detect.

Kali Linux MCP is a penetration testing toolset that provides a Kali Linux environment through Docker containers, supports SSH connection and command execution, and can be used for security testing and vulnerability exploitation.

A penetration testing tool that automatically detects XSS and SQL injection vulnerabilities in web pages, providing browser interaction, screenshot, and script execution functions

An MCP wrapper for the bloodyAD tool, providing automated operations for Active Directory enumeration and privilege escalation

Vibehacker Metasploit MCP is a FastMCP - based interface for connecting to the Metasploit framework, enabling AI agents to invoke Metasploit's functions, including exploitation, payload generation, target scanning, and session management.