Mergen MCP

Unclaimed

by g4sk0

Mergen is an MCP server that gives your AI a real red team brain. It doesn't just run tools, it picks the right ones, chains them together, and actually makes sense of the output. Built by pentesters, for pentesters who are tired of babysitting scripts.

Install

$pip install -r requirements.txt

Unclaimed listing

Is this your MCP server?

This listing was auto-indexed from the public record. Claim it to edit the page, set compatibility and unlock growth tools. Takes under two minutes.

Claim this server

Tools (40)

amass

Comprehensive domain recon (active + passive)

app_mapper

Application surface mapping and analysis

arjun

HTTP parameter discovery

binwalk

Firmware and binary file analysis and extraction

checksec

Binary security property checker

crtsh

Subdomain discovery via certificate transparency logs

dalfox

XSS detection and exploitation

dirsearch

Web path discovery

dnsenum

DNS enumeration

enum4linux

SMB/Samba user, group, and share enumeration

exploit_synth

AI-assisted exploit synthesis

feroxbuster

Recursive content discovery

ffuf

Fast web fuzzer — directories, parameters, vhosts

fierce

DNS zone transfer and subdomain brute-force

gau

URL collection from Archive.org and other sources

ghidra

NSA software reverse engineering suite (headless mode)

gobuster

Directory, file, and subdomain brute-force

hashcat

GPU-accelerated hash cracking (300+ hash types)

httpx

HTTP/HTTPS service detection and fingerprinting

hydra

Network service brute-force (50+ protocols)

john

John the Ripper — password hash cracking with custom rules

katana

JavaScript-aware web crawler

masscan

Internet-scale port scanning

metasploit

Metasploit Framework integration

netexec

SMB/WinRM/SSH network exploitation framework

nikto

Web server configuration auditing

nmap

Advanced port scanning with stealth, aggressive, and vuln script modes

nuclei

Template-based vulnerability scanner (10,000+ templates)

responder

LLMNR/NBT-NS/mDNS poisoning and hash capture

rustscan

Ultra-fast port scanner used as a Nmap pre-stage

searchsploit

Exploit-DB database search

smbmap

SMB share access mapping

sqlmap

Automatic SQL injection detection and exploitation

strings

Printable string extraction from binaries

subfinder

Passive subdomain discovery

trufflehog

Secret and credential detection in Git repositories

wafw00f

WAF detection and fingerprinting

waybackurls

Historical URL discovery from Wayback Machine

whatweb

Web technology identification (CMS, framework, version)

wpscan

WordPress security scanner