mukul975/Anthropic-Cybersecurity-Skills
A comprehensive open-source library featuring 754 structured cybersecurity skills for AI agents, mapped to five industry frameworks to provide expert-level guidance.
Awesome MCP › Security & Reverse Engineering
LaurieWired/GhidraMCP
GhidraMCP is a Model Context Protocol (MCP) server designed to integrate the powerful reverse engineering capabilities of Ghidra with MCP clients, enabling automated binary analysis and decompilation through large language models (LLMs). This project exposes core Ghidra functionalities to MCP clients, allowing them to autonomously reverse engineer applications by leveraging Ghidra's decompilation and analysis tools. Key features include the ability to decompile and analyze binaries, automatically rename methods and data, and list methods, classes, imports, and exports within binaries. The project consists of an MCP server and a Ghidra plugin, which can be installed by importing the provided plugin into Ghidra. It requires Ghidra, Python3, and the MCP SDK as prerequisites. The server is configurable, allowing users to set the port and other options within Ghidra. GhidraMCP supports interoperability with various MCP clients such as Claude Desktop, Cline, and 5ire, with detailed instructions provided for integrating with each client. The project also includes guidance for building the plugin from source using Maven, requiring specific Ghidra library files to be copied into the project. This integration facilitates enhanced automation in reverse engineering workflows by combining Ghidra's static analysis capabilities with the contextual understanding of LLMs, making it a valuable tool for security researchers, reverse engineers, and developers working with binary analysis and decompilation tasks. The project is actively maintained and licensed under Apache 2.0, with community engagement visible through GitHub stars, forks, and contributors.
https://github.com/LaurieWired/GhidraMCP
Also in Security & Reverse Engineering
NVIDIA/SkillSpector
NVIDIA security scanner for AI agent skills and MCP tooling that detects prompt injection, data exfiltration, MCP tool poisoning and least-privilege problems, and can itself be run as an MCP server inside agent sessions.
mrexodia/ida-pro-mcp
ida-pro-mcp is an MCP server for IDA Pro that enables advanced reverse engineering capabilities through MCP-based interactions and automation.
invariantlabs-ai/mcp-scan
MCP-Scan is a security tool that statically and dynamically scans and monitors Model Context Protocol (MCP) connections to detect and prevent vulnerabilities such as prompt injections, tool poisoning, and cross-origin escalations.
zinja-coder/jadx-ai-mcp
JADX-AI-MCP is a JADX plugin integrating Model Context Protocol to enable AI-powered live reverse engineering, vulnerability detection, and code analysis of Android APKs using large language models like Claude.
mariocandela/beelzebub
Beelzebub is a secure low-code honeypot framework leveraging large language models and the Model Context Protocol (MCP) to detect and analyze cyber attacks, including prompt injection attempts against LLM agents.
svnscha/mcp-windbg
mcp-windbg is a Model Context Protocol server that enables AI models to analyze Windows crash dumps using WinDBG through natural language interaction and command execution.
BlackSnufkin/LitterBox
LitterBox is a secure sandbox environment integrating with LLM agents via MCP to provide advanced malware analysis and testing capabilities for red and blue teams before deployment.