mukul975/Anthropic-Cybersecurity-Skills
A comprehensive open-source library featuring 754 structured cybersecurity skills for AI agents, mapped to five industry frameworks to provide expert-level guidance.
Awesome MCP › Security & Reverse Engineering
13bm/GhidraMCP
GhidraMCP connects the Ghidra reverse-engineering suite to MCP clients so an assistant can drive analysis of a loaded binary. The architecture has three parts: a Java plugin inside Ghidra starts a TCP server against the Ghidra Program API; a Go bridge binary, auto-launched by the plugin, speaks MCP JSON-RPC over stdio to the client and forwards each call over the local socket using four-byte length-prefixed framing; and the client itself, for example Claude Desktop or a CLI. Roughly seventy tools cover querying and mutating the program database, decompiling functions asynchronously, renaming symbols, annotating code, managing data structures, searching for vulnerability patterns, malware triage, IoT and embedded security work, and operating several Ghidra instances at once. Setup is deliberately short: the plugin ships a menu action that writes the MCP client configuration, and prebuilt bridge binaries exist for Linux x86_64, Windows x86_64 and both Intel and ARM macOS. Configuration covers the listening port, binding to localhost only, optional API-key authentication on the TCP channel, whether the bridge starts automatically, and whether it is enabled at all. It is licensed Apache 2.0 with continuous-integration builds. The audience is malware analysts and vulnerability researchers who already work in Ghidra and want an assistant able to perform the mechanical parts of an investigation.
https://github.com/13bm/GhidraMCP
Also in Security & Reverse Engineering
NVIDIA/SkillSpector
NVIDIA security scanner for AI agent skills and MCP tooling that detects prompt injection, data exfiltration, MCP tool poisoning and least-privilege problems, and can itself be run as an MCP server inside agent sessions.
mrexodia/ida-pro-mcp
ida-pro-mcp is an MCP server for IDA Pro that enables advanced reverse engineering capabilities through MCP-based interactions and automation.
LaurieWired/GhidraMCP
GhidraMCP is an MCP server that integrates Ghidra's reverse engineering capabilities with MCP clients, enabling automated binary analysis and decompilation through large language models.
invariantlabs-ai/mcp-scan
MCP-Scan is a security tool that statically and dynamically scans and monitors Model Context Protocol (MCP) connections to detect and prevent vulnerabilities such as prompt injections, tool poisoning, and cross-origin escalations.
zinja-coder/jadx-ai-mcp
JADX-AI-MCP is a JADX plugin integrating Model Context Protocol to enable AI-powered live reverse engineering, vulnerability detection, and code analysis of Android APKs using large language models like Claude.
mariocandela/beelzebub
Beelzebub is a secure low-code honeypot framework leveraging large language models and the Model Context Protocol (MCP) to detect and analyze cyber attacks, including prompt injection attempts against LLM agents.
svnscha/mcp-windbg
mcp-windbg is a Model Context Protocol server that enables AI models to analyze Windows crash dumps using WinDBG through natural language interaction and command execution.