From a2dfd6077a565eceb5b2b1f0910c228308fe9248 Mon Sep 17 00:00:00 2001 From: Behi Date: Mon, 6 Oct 2025 20:35:57 +0330 Subject: [PATCH] Update README.md --- README.md | 65 +++++++++++++++++++++++++++++++++++++++++++++++++++++-- 1 file changed, 63 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index b7f01b8..db31d58 100644 --- a/README.md +++ b/README.md @@ -1,2 +1,63 @@ -# awesome-bugbounty-mcp -A curated list of MCP servers for bug bounty. +# Awesome Bug Bounty MCP πŸ”Ž + +A focused, no-noise list of **Model Context Protocol (MCP)** servers for real bug bounty work: recon, crawling, evidence capture, enrichment, code/secret OSINT, and mobile analysis. + +--- + +## Contents +- [Recon & Internet Intel πŸ”­](#recon--internet-intel-) +- [Crawling, Fetching & Evidence πŸ•·οΈ](#crawling-fetching--evidence-️) +- [Enrichment & Triage πŸ§ͺ](#enrichment--triage-) +- [Code & Secrets OSINT πŸ§‘β€πŸ’»](#code--secrets-osint-) +- [Mobile & APK Analysis πŸ“±](#mobile--apk-analysis-) +- [Orchestration πŸ› οΈ](#orchestration-) +- [Contact πŸ“¬](#contact-) + +--- + +## Recon & Internet Intel πŸ”­ + +- **[mcp-recon](https://github.com/nickpending/mcp-recon)** – Conversational recon for domains, IPs, ASNs; turns plain questions into targeted HTTP/ASN checks. +- **[Shodan MCP](https://github.com/Cyreslab-AI/shodan-mcp-server)** – Map exposed hosts/services and pivot on CVEs from Shodan results. +- **[Censys MCP](https://github.com/nickpending/mcp-censys)** – Enumerate hosts/certs/services across the internet map with Censys Search. + +--- + +## Crawling, Fetching & Evidence πŸ•·οΈ + +- **[Firecrawl MCP](https://github.com/firecrawl/firecrawl-mcp-server)** – Crawl/scrape and return structured content for diffing and analysis. +- **[Screenshot Website MCP](https://github.com/just-every/mcp-screenshot-website-fast)** – Fast, headless screenshots (auto-tiling) for crisp PoC evidence. +- **[Fetch MCP (official)](https://github.com/modelcontextprotocol/servers/tree/main/src/fetch)** – Lightweight HTMLβ†’Markdown fetcher when you don’t need a full browser. + +--- + +## Enrichment & Triage πŸ§ͺ + +- **[VirusTotal MCP](https://github.com/BurtTheCoder/mcp-virustotal)** – Lookups for URLs/files/IPs/domains with relationship context. +- **[CVE-Search MCP](https://github.com/roadwy/cve-search_mcp)** – Query vendors/products/recent updates or specific CVE IDs. + +--- + +## Code & Secrets OSINT πŸ§‘β€πŸ’» + +- **[GitHub MCP (remote)](https://github.com/github/github-mcp-server)** – Search repos/issues/PRs and review diffs to triage suspected secrets. +- **[Maigret MCP](https://github.com/BurtTheCoder/mcp-maigret)** – Username footprinting across many platforms with quick URL checks. + +--- + +## Mobile & APK Analysis πŸ“± + +- **[apktool-mcp-server](https://github.com/zinja-coder/apktool-mcp-server)** – Decompile and inspect manifests/resources for Android targets. + +--- + +## Orchestration πŸ› οΈ + +- **[secops-mcp](https://github.com/securityfortech/secops-mcp)** – "Multi-tool" hub wiring common security utilities behind a simple MCP interface for bug bounty workflows. + +--- + + +## Contact πŸ“¬ + +You can reach me on [X](https://x.com/Behi_Sec).