Orhan Yildirim

darknet-mcp-server. 66-tool MCP server for dark web intelligence — breach data, ransomware tracking, Tor .onion access, malware analysis, blockchain intel, exploit search, stealer logs

osint-mcp-server. OSINT intelligence MCP server for AI agents — 37 tools, 12 sources. Shodan, VirusTotal, Censys, SecurityTrails, DNS reconnaissance, WHOIS, certificate transparency, BGP routing, Wayback Machine, GeoIP. Automated open source intelligence and attack surface mapping via Model Context Protocol.

AzureAD-Pentest. AzureAD Pentest

cloud-audit-mcp. Cloud security audit tools for AI agents — AWS, Azure, GCP misconfiguration detection via MCP. 38 tools, 60+ checks. The agent finds vulns, not you.

hackbrowser-mcp. The first browser MCP built for security testing. Give your AI agent a real Firefox browser and let it find vulnerabilities.

cve-mcp. 23-tool MCP server for CVE & vulnerability intelligence. NVD, EPSS, CISA KEV, GitHub Advisory, OSV — unified in one server. Risk scoring, bulk triage, exploit search. 2 dependencies, runs with npx.

github-security-mcp. GitHub security posture analysis for AI agents — 39 MCP tools, 45 checks across org, repos, Actions, secrets, supply chain, and access control

recon0. All-in-one bug bounty recon pipeline — 9-stage orchestration from subdomain enumeration to vulnerability scanning. Single binary, headless browser crawling, 60+ DSL rules, LLM intelligence, self-updating.

dns-security-mcp. 104-tool DNS Security Intelligence MCP Server — DNSSEC, hijacking, tunneling, typosquatting, email security, CT monitoring, blocklist, infrastructure audit. 100% local, zero API keys required.

mcp-security-scanner. 55-tool MCP server for security scanning of MCP servers. Runtime inspection, AST-based SAST, config audit, dependency analysis, OWASP MCP Top 10 compliance. OAuth, TLS, fuzz testing, prompt injection, tool mutation detection. 100% local, zero external API calls.

ai-knowledge-graph. Interactive AI/ML Knowledge Graph — 132 terms, 531 relationships, 11 categories, 6 languages. Security-first content covering GPU to prompt injection. D3.js force-directed visualization.

supply-chain-mcp-server. 90-tool MCP server for software supply chain security — OSV, GHSA, NVD, EPSS, CISA KEV, npm, PyPI, crates.io, RubyGems, NuGet, Packagist, Go, deps.dev, Scorecard, Rekor, ClearlyDefined, Repology, typosquatting detection

steganography-mcp. 128-tool MCP server for steganography analysis — LSB detection, chi-square steganalysis, RS analysis, JPEG/F5/JSteg/OutGuess detection, BPCS, video & GIF stego, network covert channels, MP3 stego, spread spectrum, archive stego, QR code analysis, audio stego, text encoding, file forensics. 100% offline, zero API keys.

fingerprint-mcp. Universal digital fingerprinting MCP server — 103 techniques in 13 tools for TCP/TLS/SSH/HTTP/DNS/WAF/IoT fingerprinting, C2 detection, OSINT enrichment

VulnerableExpenseTrackerAPI. Java

nMapper. nMapper is an automated penetration testing tool. (speech recognition included!)

wifi-security-mcp-server. Full-spectrum wireless security MCP server — WiFi, Bluetooth, RF/SDR, NFC/RFID, Cellular/5G, IoT, MouseJack, air-gap, UWB, WIDS/WIPS, compliance. 34 tools, 9 knowledge bases.

ReverseShell_CheatSheet.

Toolkit. My Toolkit

Offensive-Security-with-Agentic-AI.

awesome-ethereum-security. A curated list of awesome Ethereum security references

solidity-security-blog. Comprehensive list of known attack vectors and common anti-patterns

living-off-the-land-lolbins-mcp-server. Living off the Land LOLBins MCP Server — 59 composite tools for LOL binary intelligence across 10 catalogs (GTFOBins, LOLBAS, LOOBins, LOLDrivers, LOLRMM, LOLESXi, LOTP, LOLC2, LOFLCAB, WADComs)

satellite-mcp. Full-Spectrum Geospatial Intelligence MCP Server — 171 tools across 27 categories: satellite imagery, aircraft tracking, maritime intelligence, military & defense, space tracking, conflict mapping, environmental monitoring, and more