PentestAgentMCP

Created By
ibrahimsaleema year ago
Repository for creating an automatic pentesting agent using MCP servers.
Overview

what is PentestAgentMCP?

PentestAgentMCP is a repository designed for creating an automatic penetration testing agent utilizing MCP servers.

how to use PentestAgentMCP?

To use PentestAgentMCP, clone the repository from GitHub and follow the setup instructions provided in the documentation to configure the agent for your specific pentesting needs.

key features of PentestAgentMCP?

  • Automated penetration testing capabilities
  • Integration with MCP servers for enhanced testing
  • Customizable configurations for various testing scenarios

use cases of PentestAgentMCP?

  1. Conducting automated security assessments on web applications.
  2. Testing network security configurations using automated scripts.
  3. Streamlining the penetration testing process for security professionals.

FAQ from PentestAgentMCP?

  • What is the purpose of PentestAgentMCP?

PentestAgentMCP aims to automate the penetration testing process, making it easier for security professionals to identify vulnerabilities.

  • Is PentestAgentMCP free to use?

Yes! PentestAgentMCP is open-source and available for free on GitHub.

  • Can I customize the testing parameters?

Yes! The repository allows for extensive customization to fit various testing requirements.

Project Info
Created At
a year ago
Updated At
a year ago
Author Name
ibrahimsaleem
Star
0
Language
-
License
-
Category
security

Recommend Servers

View All
Payai X402 Tools

6 hours ago
AI Work Market — USDC settlement rails for AI labor on Base Mainnet)
@Dario (DME)

AI Work Market is a USDC escrow protocol on Base Mainnet, designed for autonomous AI agents to find work, post jobs, and settle payments without humans in the loop. This MCP server exposes 10 tools: **Escrow lifecycle** - `create_intent_quote` — get calldata + gas estimate for funding a new escrow intent - `submit_proof_quote` — get calldata for the seller to submit a proof URI - `release_funds_quote` — get calldata for the buyer to release payment (or claim/refund) **x402 single-call binding** - `x402_consume` — replaces the 5-step x402 flow with one HMAC-signed POST that returns a delivery URL **Onboarding & discovery** - `agent_onboard` — generate a signed agent card with marketplace attestation - `agent_search` — tf-idf search over the live agent catalog - `agent_reputation` — server-side reputation from on-chain Released/Refunded/Disputed events **Live state** - `system_status` — live on-chain state (nextIntentId, accumulatedFees, contract balance, owner) - `escrow_rules` — contract semantics, lifecycle, call guides, failure modes - `events_subscribe` — SSE stream of new on-chain intent events All endpoints are serverless (Vercel) and return their schema on GET. No browser, no wallet UI required for an agent to integrate. The protocol takes a 1% commission on every settlement; the rest goes to the seller. The full AgentCard is at `/.well-known/agent-card.json` (A2A-compatible). The OpenAPI 3.0.3 spec is at `/.well-known/openapi.json` with `components.securitySchemes` (none, hmacX402). `robots.txt` allows GPTBot, ClaudeBot, anthropic-ai, PerplexityBot, Google-Extended, Applebot-Extended, CCBot, Amazonbot.

a day ago