moderate2026-03
FuzzingLabs Security Hub: 481 stars, Ghidra + Nmap + Nuclei MCP serversMCP servers for Nmap, Ghidra, Nuclei, SQLMap, Hashcat. Strongest on reverse engineering side. 481 stars.
481 GitHub starsOpen-source community
← All solutions
FuzzingLabs Security Hub
activeMCP servers for Nmap, Ghidra, Nuclei, SQLMap, Hashcat. 481 stars. Stronger on reverse engineering and binary/protocol analysis. Best for security researchers doing binary work.
Score 59
Where it wins
Reverse engineering focus — Ghidra integration via MCP
Binary and protocol analysis tools (Hashcat, Nuclei)
481 stars — niche but active
Where to be skeptical
Narrower than HexStrike or cyproxio collections
Reverse engineering focus limits general applicability
Editorial verdict
#3 offensive security. MCP servers for Nmap, Ghidra, Nuclei, SQLMap, Hashcat. 481 stars. Differentiates on reverse engineering / binary analysis. Best for security researchers working with binaries and protocols.
Related
CodeQL (via GitHub MCP Server)
88GitHub-native SAST via CodeQL, accessible through the official GitHub MCP Server. Copilot Autofix generates fixes from CodeQL alerts. GitHub Security Lab Taskflow Agent found ~30 real CVEs. Zero extra setup for GitHub users.
TruffleHog
8818K+ stars. 800+ secret types. Unique credential verification — confirms if leaked creds are still active. Scans S3, Docker, Slack — not just git. No official MCP but community integrations exist.
Gitleaks
8824.4K stars — most-starred secret scanner. 150+ patterns. Fastest pre-commit scanner. The community default for pre-commit secret detection. No official MCP.
Tencent AI-Infra-Guard
81Most comprehensive OSS AI red teaming tool. 3,264 stars. Full-stack: ClawScan, Agent Scan, Skills Scan, MCP scan, jailbreak eval. 43 AI framework components, 589 CVEs cataloged. v4.0 released.
Public evidence
Raw GitHub source
GitHub README could not be fetched right now.