Washington DC, USA · Offensive Security · Author: Agentic AI for Offensive Cybersecurity
Building AI-powered security tools at the intersection of penetration testing and agentic AI.
| Project | Description |
|---|---|
| CyberStrike | AI-powered offensive security agent — autonomous pentesting, 4 specialized agents, 120+ OWASP test cases |
| recon0 | All-in-one bug bounty recon pipeline — 9-stage, resumable, LLM-enriched |
| nMapper | Automated penetration testing tool with speech recognition |
| AzureAD-Pentest | Azure Active Directory penetration testing methodology and tooling |
| osint-mcp | OSINT intelligence MCP — 37 tools, 12 sources. Shodan, VirusTotal, Censys, SecurityTrails, DNS recon, WHOIS, certificate transparency, BGP, Wayback Machine |
| supply-chain-mcp | Supply chain security MCP — 90 tools, 21 sources. OSV, GHSA, NVD, EPSS, CISA KEV, npm, PyPI, crates.io, Go, RubyGems, NuGet, Packagist, deps.dev, Scorecard, Rekor |
| darknet-mcp | Dark web intelligence MCP — 66 tools, 16 sources. Breach data, ransomware tracking, Tor .onion, malware analysis, blockchain intel, exploit search |
| hackbrowser-mcp | Browser MCP for security testing — 39 tools, multi-container Firefox, injection testing |
| cloud-audit-mcp | Cloud security audit MCP — 38 tools, 60+ checks across AWS, Azure, GCP |
| github-security-mcp | GitHub security posture MCP — 39 tools, 45 checks across org, repos, Actions, secrets, supply chain |
| cve-mcp | CVE/vulnerability intelligence MCP — 23 tools, 5 sources (NVD, EPSS, KEV, GHSA, OSV), risk scoring |
| dns-security-mcp | DNS security intelligence MCP — 104 tools, 13 categories. DNSSEC validation, hijacking detection, tunneling analysis, typosquatting, email security, certificate transparency, blocklist checking. Zero API keys required |
| satellite-mcp | Full-spectrum GEOINT MCP — 171 tools, 27 categories. Satellite imagery, aircraft tracking, maritime surveillance, military intelligence, conflict monitoring, space tracking, environmental analysis, sanctions compliance, cyber-geo intel |
| steganography-mcp | Steganography analysis MCP — 128 tools, 12 categories. LSB detection, chi-square steganalysis, RS analysis, JPEG/F5/JSteg/OutGuess detection, BPCS, video & GIF stego, network covert channels, MP3 stego, spread spectrum, archive stego, QR code analysis. Zero API keys |
| mcp-security-scanner | MCP server security scanner — 55 tools. Runtime inspection, AST-based SAST, config audit, dependency analysis, OWASP MCP Top 10 compliance, prompt injection testing |
| living-off-the-land-lolbins-mcp | Living off the Land LOLBins MCP — 59 tools, 10 catalogs (GTFOBins, LOLBAS, LOOBins, LOLDrivers, LOLRMM, WADComs). Privilege escalation, persistence, evasion, detection engineering, ATT&CK mapping |
| fingerprint-mcp | Digital fingerprinting MCP — 13 tools, 103 techniques. TCP/TLS/SSH/HTTP/DNS/WAF/IoT fingerprinting, JA4/JARM, C2 detection, OSINT enrichment |
| ai-knowledge-graph | Interactive AI/ML knowledge graph — 132 terms, 531 relationships, 11 categories, 6 languages |
Breaking things to make them stronger. Finding vulnerabilities so others can fix them.