sahiloj/MCPScan: Offensive MCP server auditor — detects tool poisoning, credential leaks, RCE vectors, SSRF, session hijacking, and supply chain vulnerabilities across stdio, HTTP, and SSE transports.
Language: TypeScript
Topics: ai-security, llm-security, mcp, mcp-security, mcpscan, model-context-protocol, offensive-security, open-source, security, supply-chain, tool-poisoning, vulnerability-scanner
Category: security-testing-mcp