Mergen MCP
未认领Mergen is an MCP server that gives your AI a real red team brain. It doesn't just run tools, it picks the right ones, chains them together, and actually makes sense of the output. Built by pentesters, for pentesters who are tired of babysitting scripts.
安装
pip install -r requirements.txt工具（40 个）
amass
Comprehensive domain recon (active + passive)
app_mapper
Application surface mapping and analysis
arjun
HTTP parameter discovery
binwalk
Firmware and binary file analysis and extraction
checksec
Binary security property checker
crtsh
Subdomain discovery via certificate transparency logs
dalfox
XSS detection and exploitation
dirsearch
Web path discovery
dnsenum
DNS enumeration
enum4linux
SMB/Samba user, group, and share enumeration
exploit_synth
AI-assisted exploit synthesis
feroxbuster
Recursive content discovery
ffuf
Fast web fuzzer — directories, parameters, vhosts
fierce
DNS zone transfer and subdomain brute-force
gau
URL collection from Archive.org and other sources
ghidra
NSA software reverse engineering suite (headless mode)
gobuster
Directory, file, and subdomain brute-force
hashcat
GPU-accelerated hash cracking (300+ hash types)
httpx
HTTP/HTTPS service detection and fingerprinting
hydra
Network service brute-force (50+ protocols)
john
John the Ripper — password hash cracking with custom rules
katana
JavaScript-aware web crawler
masscan
Internet-scale port scanning
metasploit
Metasploit Framework integration
netexec
SMB/WinRM/SSH network exploitation framework
nikto
Web server configuration auditing
nmap
Advanced port scanning with stealth, aggressive, and vuln script modes
nuclei
Template-based vulnerability scanner (10,000+ templates)
responder
LLMNR/NBT-NS/mDNS poisoning and hash capture
rustscan
Ultra-fast port scanner used as a Nmap pre-stage
searchsploit
Exploit-DB database search
smbmap
SMB share access mapping
sqlmap
Automatic SQL injection detection and exploitation
strings
Printable string extraction from binaries
subfinder
Passive subdomain discovery
trufflehog
Secret and credential detection in Git repositories
wafw00f
WAF detection and fingerprinting
waybackurls
Historical URL discovery from Wayback Machine
whatweb
Web technology identification (CMS, framework, version)
wpscan
WordPress security scanner