mirror of
https://github.com/BehiSecc/awesome-bugbounty-mcp.git
synced 2026-10-17 13:23:21 -05:00
Update README.md
This commit is contained in:
@@ -1,2 +1,63 @@
|
||||
# awesome-bugbounty-mcp
|
||||
A curated list of MCP servers for bug bounty.
|
||||
# Awesome Bug Bounty MCP 🔎
|
||||
|
||||
A focused, no-noise list of **Model Context Protocol (MCP)** servers for real bug bounty work: recon, crawling, evidence capture, enrichment, code/secret OSINT, and mobile analysis.
|
||||
|
||||
---
|
||||
|
||||
## Contents
|
||||
- [Recon & Internet Intel 🔭](#recon--internet-intel-)
|
||||
- [Crawling, Fetching & Evidence 🕷️](#crawling-fetching--evidence-️)
|
||||
- [Enrichment & Triage 🧪](#enrichment--triage-)
|
||||
- [Code & Secrets OSINT 🧑💻](#code--secrets-osint-)
|
||||
- [Mobile & APK Analysis 📱](#mobile--apk-analysis-)
|
||||
- [Orchestration 🛠️](#orchestration-)
|
||||
- [Contact 📬](#contact-)
|
||||
|
||||
---
|
||||
|
||||
## Recon & Internet Intel 🔭
|
||||
|
||||
- **[mcp-recon](https://github.com/nickpending/mcp-recon)** – Conversational recon for domains, IPs, ASNs; turns plain questions into targeted HTTP/ASN checks.
|
||||
- **[Shodan MCP](https://github.com/Cyreslab-AI/shodan-mcp-server)** – Map exposed hosts/services and pivot on CVEs from Shodan results.
|
||||
- **[Censys MCP](https://github.com/nickpending/mcp-censys)** – Enumerate hosts/certs/services across the internet map with Censys Search.
|
||||
|
||||
---
|
||||
|
||||
## Crawling, Fetching & Evidence 🕷️
|
||||
|
||||
- **[Firecrawl MCP](https://github.com/firecrawl/firecrawl-mcp-server)** – Crawl/scrape and return structured content for diffing and analysis.
|
||||
- **[Screenshot Website MCP](https://github.com/just-every/mcp-screenshot-website-fast)** – Fast, headless screenshots (auto-tiling) for crisp PoC evidence.
|
||||
- **[Fetch MCP (official)](https://github.com/modelcontextprotocol/servers/tree/main/src/fetch)** – Lightweight HTML→Markdown fetcher when you don’t need a full browser.
|
||||
|
||||
---
|
||||
|
||||
## Enrichment & Triage 🧪
|
||||
|
||||
- **[VirusTotal MCP](https://github.com/BurtTheCoder/mcp-virustotal)** – Lookups for URLs/files/IPs/domains with relationship context.
|
||||
- **[CVE-Search MCP](https://github.com/roadwy/cve-search_mcp)** – Query vendors/products/recent updates or specific CVE IDs.
|
||||
|
||||
---
|
||||
|
||||
## Code & Secrets OSINT 🧑💻
|
||||
|
||||
- **[GitHub MCP (remote)](https://github.com/github/github-mcp-server)** – Search repos/issues/PRs and review diffs to triage suspected secrets.
|
||||
- **[Maigret MCP](https://github.com/BurtTheCoder/mcp-maigret)** – Username footprinting across many platforms with quick URL checks.
|
||||
|
||||
---
|
||||
|
||||
## Mobile & APK Analysis 📱
|
||||
|
||||
- **[apktool-mcp-server](https://github.com/zinja-coder/apktool-mcp-server)** – Decompile and inspect manifests/resources for Android targets.
|
||||
|
||||
---
|
||||
|
||||
## Orchestration 🛠️
|
||||
|
||||
- **[secops-mcp](https://github.com/securityfortech/secops-mcp)** – "Multi-tool" hub wiring common security utilities behind a simple MCP interface for bug bounty workflows.
|
||||
|
||||
---
|
||||
|
||||
|
||||
## Contact 📬
|
||||
|
||||
You can reach me on [X](https://x.com/Behi_Sec).
|
||||
|
||||
Reference in New Issue
Block a user