Update README.md

This commit is contained in:
Behi
2025-10-06 20:35:57 +03:30
committed by GitHub
parent 53cce571ce
commit a2dfd6077a
+63 -2
View File
@@ -1,2 +1,63 @@
# awesome-bugbounty-mcp
A curated list of MCP servers for bug bounty.
# Awesome Bug Bounty MCP 🔎
A focused, no-noise list of **Model Context Protocol (MCP)** servers for real bug bounty work: recon, crawling, evidence capture, enrichment, code/secret OSINT, and mobile analysis.
---
## Contents
- [Recon & Internet Intel 🔭](#recon--internet-intel-)
- [Crawling, Fetching & Evidence 🕷️](#crawling-fetching--evidence-️)
- [Enrichment & Triage 🧪](#enrichment--triage-)
- [Code & Secrets OSINT 🧑‍💻](#code--secrets-osint-)
- [Mobile & APK Analysis 📱](#mobile--apk-analysis-)
- [Orchestration 🛠️](#orchestration-)
- [Contact 📬](#contact-)
---
## Recon & Internet Intel 🔭
- **[mcp-recon](https://github.com/nickpending/mcp-recon)** – Conversational recon for domains, IPs, ASNs; turns plain questions into targeted HTTP/ASN checks.
- **[Shodan MCP](https://github.com/Cyreslab-AI/shodan-mcp-server)** – Map exposed hosts/services and pivot on CVEs from Shodan results.
- **[Censys MCP](https://github.com/nickpending/mcp-censys)** – Enumerate hosts/certs/services across the internet map with Censys Search.
---
## Crawling, Fetching & Evidence 🕷️
- **[Firecrawl MCP](https://github.com/firecrawl/firecrawl-mcp-server)** – Crawl/scrape and return structured content for diffing and analysis.
- **[Screenshot Website MCP](https://github.com/just-every/mcp-screenshot-website-fast)** – Fast, headless screenshots (auto-tiling) for crisp PoC evidence.
- **[Fetch MCP (official)](https://github.com/modelcontextprotocol/servers/tree/main/src/fetch)** – Lightweight HTML→Markdown fetcher when you don’t need a full browser.
---
## Enrichment & Triage 🧪
- **[VirusTotal MCP](https://github.com/BurtTheCoder/mcp-virustotal)** – Lookups for URLs/files/IPs/domains with relationship context.
- **[CVE-Search MCP](https://github.com/roadwy/cve-search_mcp)** – Query vendors/products/recent updates or specific CVE IDs.
---
## Code & Secrets OSINT 🧑‍💻
- **[GitHub MCP (remote)](https://github.com/github/github-mcp-server)** – Search repos/issues/PRs and review diffs to triage suspected secrets.
- **[Maigret MCP](https://github.com/BurtTheCoder/mcp-maigret)** – Username footprinting across many platforms with quick URL checks.
---
## Mobile & APK Analysis 📱
- **[apktool-mcp-server](https://github.com/zinja-coder/apktool-mcp-server)** – Decompile and inspect manifests/resources for Android targets.
---
## Orchestration 🛠️
- **[secops-mcp](https://github.com/securityfortech/secops-mcp)** – "Multi-tool" hub wiring common security utilities behind a simple MCP interface for bug bounty workflows.
---
## Contact 📬
You can reach me on [X](https://x.com/Behi_Sec).