awesome-bugbounty-mcp/README.md

Awesome Bug Bounty MCP 🔎

A focused, no-noise list of Model Context Protocol (MCP) servers for real bug bounty work: recon, crawling, evidence capture, enrichment, code/secret OSINT, and mobile analysis.

---

Contents

• Recon & Internet Intel 🔭
• Crawling, Fetching & Evidence 🕷️
• Enrichment & Triage 🧪
• Code & Secrets OSINT 🧑‍💻
• Mobile & APK Analysis 📱
• Orchestration 🛠️
• Contact 📬

---

Recon & Internet Intel 🔭

• mcp-recon – Conversational recon for domains, IPs, ASNs; turns plain questions into targeted HTTP/ASN checks.
• Shodan MCP – Map exposed hosts/services and pivot on CVEs from Shodan results.
• Censys MCP – Enumerate hosts/certs/services across the internet map with Censys Search.

---

Crawling, Fetching & Evidence 🕷️

• Firecrawl MCP – Crawl/scrape and return structured content for diffing and analysis.
• Screenshot Website MCP – Fast, headless screenshots (auto-tiling) for crisp PoC evidence.
• Fetch MCP (official) – Lightweight HTML→Markdown fetcher when you don’t need a full browser.

---

Enrichment & Triage 🧪

• VirusTotal MCP – Lookups for URLs/files/IPs/domains with relationship context.
• CVE-Search MCP – Query vendors/products/recent updates or specific CVE IDs.

---

Code & Secrets OSINT 🧑‍💻

• GitHub MCP (remote) – Search repos/issues/PRs and review diffs to triage suspected secrets.
• Maigret MCP – Username footprinting across many platforms with quick URL checks.

---

Mobile & APK Analysis 📱

• apktool-mcp-server – Decompile and inspect manifests/resources for Android targets.

---

Orchestration 🛠️

• secops-mcp – "Multi-tool" hub wiring common security utilities behind a simple MCP interface for bug bounty workflows.

---

Contact 📬

You can reach me on X.