Awesome MCPSecurity & Reverse Engineering

erwinkramer/bank-api

⭐ 842 C# added to this list on 2025-12-26 repository created 2024-11-01

The Bank API is a design reference project aimed at bootstrapping the development of compliant and modern APIs, particularly in the banking domain. It emphasizes adherence to multiple compliance standards including OWASP API Security Top 10 (2023), OpenAPI Specification v3.1.1, Dutch Public Sector REST API Design Rules, California Consumer Privacy Act (CCPA), General Data Protection Regulation (GDPR), and JSON Web Signature (JWS) and JSON Web Key Set (JWKs) standards for secure response signing and validation. The project is built using ASP.NET Core 10.0 Minimal API framework and incorporates a comprehensive technology stack that supports resilience, compliance, health checks, service discovery, caching, rate limiting, and multiple authentication strategies such as API Key, JWT bearer, and OpenID Connect. It also integrates OpenAPI for specification generation, Cross-Origin Resource Sharing (CORS) for cross-origin requests, and validation for endpoint requests. Observability is enhanced through OpenTelemetry, and development is bootstrapped with Aspire, which also supports client integrations. The project uses Kiota for downstream API client generation, Gridify for filtering, ordering, and paging, Scalar for interactive API documentation, Spectral for linting OpenAPI documents, and TUnit for unit testing. REST Client extension in Visual Studio Code facilitates quick local testing. Importantly, the Bank API is exposed via the Model Context Protocol (MCP) using MCPify, making it relevant to MCP-related projects. The design is layered with components for API services, orchestration, MCP server, tests, and generated infrastructure and specifications. The project supports quick start instructions including regenerating clients, certificates, manifests, and JWT tokens, and offers multiple run modes including Aspire minimal mode and full Aspire mode with MCP server. This project serves as a comprehensive, secure, and compliant reference implementation for banking APIs with modern best practices and MCP exposure.

https://github.com/erwinkramer/bank-api

apiapi-key-authenticationarchitectureasp-net-coreasp.net-core-10.0aspireaspnet-corebank-apicachingccpacompliancecompliant-apicorsdotnetdutch-public-sector-rest-api-design-rulesgdprgridifyhealth-checksjson-web-key-setjson-web-signaturejwt-bearer-authenticationkiotamcpmcp-servermcpifyminimal-apimodel-context-protocolmodern-apiopenapiopenapi-specificationopenid-connectopentelemetryowasp-api-securityrate-limitingresiliencerest-clientscalarservice-discoveryspectraltunitvalidation

Also in Security & Reverse Engineering

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive open-source library featuring 754 structured cybersecurity skills for AI agents, mapped to five industry frameworks to provide expert-level guidance.

NVIDIA/SkillSpector

NVIDIA security scanner for AI agent skills and MCP tooling that detects prompt injection, data exfiltration, MCP tool poisoning and least-privilege problems, and can itself be run as an MCP server inside agent sessions.

mrexodia/ida-pro-mcp

ida-pro-mcp is an MCP server for IDA Pro that enables advanced reverse engineering capabilities through MCP-based interactions and automation.

LaurieWired/GhidraMCP

GhidraMCP is an MCP server that integrates Ghidra's reverse engineering capabilities with MCP clients, enabling automated binary analysis and decompilation through large language models.

invariantlabs-ai/mcp-scan

MCP-Scan is a security tool that statically and dynamically scans and monitors Model Context Protocol (MCP) connections to detect and prevent vulnerabilities such as prompt injections, tool poisoning, and cross-origin escalations.

zinja-coder/jadx-ai-mcp

JADX-AI-MCP is a JADX plugin integrating Model Context Protocol to enable AI-powered live reverse engineering, vulnerability detection, and code analysis of Android APKs using large language models like Claude.

mariocandela/beelzebub

Beelzebub is a secure low-code honeypot framework leveraging large language models and the Model Context Protocol (MCP) to detect and analyze cyber attacks, including prompt injection attempts against LLM agents.

svnscha/mcp-windbg

mcp-windbg is a Model Context Protocol server that enables AI models to analyze Windows crash dumps using WinDBG through natural language interaction and command execution.