{"repo":"telmon95/VulneraMCP","free":true,"listed":false,"github":"https://github.com/telmon95/VulneraMCP","clone":"git clone https://github.com/telmon95/VulneraMCP.git","description":"An AI-Powered Bug Bounty Hunting Platform - Comprehensive MCP server for security testing, vulnerability research, and bug bounty hunting","language":"TypeScript","stars":40,"topics":[],"license":"MIT","category":"mcp-servers","readme_excerpt":"VulneraMCP An AI-Powered Bug Bounty MCP Server — recon, vulnerability testing, API/auth/cloud scanning, graph analysis, and reporting for security researchers and bug bounty hunters. VulneraMCP is a Model Context Protocol (MCP) server for bug bounty hunting and security testing. It integrates OWASP ZAP, optional Caido/Burp Suite, and CLI tools (subfinder, httpx, gau, ffuf) for reconnaissance, JavaScript analysis, XSS/SQLi/IDOR/CSRF testing, API and auth misconfiguration checks, cloud bucket and secret scanning, orchestrated scan flows, knowledge-graph analysis, wordlist generation, and Markdown reporting — with PostgreSQL storage for findings and test results. 🎬 Demo Watch the VulneraMCP demonstration on YouTube: https://youtu.be/wlUvBVNyh74 🌟 Features 🔍 Reconnaissance Tools - Subdomain Discovery : Subfinder, Amass integration - Live Host Detection : HTTPx for checking active endpoints - DNS Resolution : DNS record enumeration (A, AAAA, CNAME, MX, TXT) - URL Discovery : Gau (Get All URLs) from archives and crawlers - Fuzzing : ffuf for directory, file, and parameter discovery - Full Recon Workflow : Automated multi-tool reconnaissance 🔐 Security Testing - XSS Testing : Automated cross-site scripting detection - SQL Injection : SQLi vulnerability testing with sqlmap fallback - IDOR Detection : Insecure Direct Object Reference testing - CSP Analysis : Content Security Policy misconfiguration detection - Auth Bypass : Authentication bypass attempt testing - CSRF Testing : Cr","default_branch":null,"files":null,"tree":[],"storefront":"/r/telmon95","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/telmon95/VulneraMCP/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}