io.github.26zl/cybersec-toolkit
Servidor MCP · 26zl
- En tu equipo
io.github.26zl/cybersec-toolkit es un servidor MCP publicado por 26zl. Marketplaces que leemos y que lo publican: 2 (Official MCP Registry, Community GitHub marketplaces). Lo vimos por primera vez el 2026-10-11 y desde entonces no hemos registrado cambios. Según nuestra pasada por los marketplaces del 2026-10-12.
Authorization-gated MCP server to discover and run 670+ security tools for CTF, pentest, and DFIR.
- Marketplaces
- 2
- Dónde se ejecuta
- En tu equipo
ghcr.io/26zl/cybersec-toolkit:1.3.0 - Mayor cifra publicada
- 69 Estrellas (GitHub) · Official MCP Registry
- Visto por primera vez
- 2026-10-11
- Último cambio
- Ninguno registrado
- Marca de verificación
- Sin marca
Dónde está publicado
| Marketplace | Estado | Versión | Cifras | Verificado | Visto por primera vez |
|---|---|---|---|---|---|
| Official MCP Registry (Abrir el registro) | Publicado | 1.3.0 | Forks (GitHub): 12 Estrellas (GitHub): 69 |
Sin marca |
Cada cifra es del propio marketplace y nunca se suma entre marketplaces. Un marketplace que no publica cifras no muestra ninguna: sin número no es cero.
También figura en un marketplace de la comunidad
| Marketplace | Repositorio | Estrellas (GitHub) |
|---|---|---|
| cybersec-toolkit | 26zl/cybersec-toolkit | 69 |
Qué puede hacer
Se ejecuta en tu equipo, en un contenedor iniciado desde esta imagen: ghcr.io/26zl/cybersec-toolkit:1.3.0
- Herramientas que declara
- No publicado
- Variables de entorno que pide
- 2 de ellas secretos: 0
Qué contiene el paquete
Tal como se publica en Community GitHub marketplaces.
Servidores MCP: 1
cybersec-tools
Skills: 199
acquiring-disk-image-with-dd-and-dcflddadd-toolai-llm-security-reviewai-threat-testinganalyzing-active-directory-acl-abuseanalyzing-android-malware-with-apktoolanalyzing-api-gateway-access-logsanalyzing-apt-group-with-mitre-navigatoranalyzing-azure-activity-logs-for-threatsanalyzing-bootkit-and-rootkit-samplesanalyzing-browser-forensics-with-hindsightanalyzing-campaign-attribution-evidence
Mostrar los otros 187
analyzing-certificate-transparency-for-phishinganalyzing-cloud-storage-access-patternsanalyzing-cobalt-strike-beacon-configurationanalyzing-cobaltstrike-malleable-c2-profilesanalyzing-command-and-control-communicationanalyzing-cyber-kill-chainanalyzing-disk-image-with-autopsyanalyzing-dns-logs-for-exfiltrationanalyzing-docker-container-forensicsanalyzing-email-headers-for-phishing-investigationanalyzing-ethereum-smart-contract-vulnerabilitiesanalyzing-golang-malware-with-ghidraanalyzing-heap-spray-exploitationanalyzing-indicators-of-compromiseanalyzing-ios-app-security-with-objectionanalyzing-kubernetes-audit-logsanalyzing-linux-audit-logs-for-intrusionanalyzing-linux-elf-malwareanalyzing-linux-kernel-rootkitsanalyzing-linux-system-artifactsanalyzing-lnk-file-and-jump-list-artifactsanalyzing-macro-malware-in-office-documentsanalyzing-malicious-pdf-with-peepdfanalyzing-malicious-url-with-urlscananalyzing-malware-behavior-with-cuckoo-sandboxanalyzing-malware-family-relationships-with-malpediaanalyzing-malware-persistence-with-autorunsanalyzing-malware-sandbox-evasion-techniquesanalyzing-memory-dumps-with-volatilityanalyzing-memory-forensics-with-lime-and-volatilityanalyzing-mft-for-deleted-file-recoveryanalyzing-network-covert-channels-in-malwareanalyzing-network-flow-data-with-netflowanalyzing-network-packets-with-scapyanalyzing-network-traffic-for-incidentsanalyzing-network-traffic-of-malwareanalyzing-network-traffic-with-wiresharkanalyzing-office365-audit-logs-for-compromiseanalyzing-outlook-pst-for-email-forensicsanalyzing-packed-malware-with-upx-unpackeranalyzing-pdf-malware-with-pdfidanalyzing-persistence-mechanisms-in-linuxanalyzing-powershell-empire-artifactsanalyzing-powershell-script-block-logginganalyzing-prefetch-files-for-execution-historyanalyzing-ransomware-encryption-mechanismsanalyzing-ransomware-leak-site-intelligenceanalyzing-ransomware-network-indicatorsanalyzing-ransomware-payment-walletsanalyzing-sbom-for-supply-chain-vulnerabilitiesanalyzing-security-logs-with-splunkanalyzing-slack-space-and-file-system-artifactsanalyzing-supply-chain-malware-artifactsanalyzing-threat-actor-ttps-with-mitre-attackanalyzing-threat-actor-ttps-with-mitre-navigatoranalyzing-threat-intelligence-feedsanalyzing-threat-landscape-with-mispanalyzing-tls-certificate-transparency-logsanalyzing-typosquatting-domains-with-dnstwistanalyzing-uefi-bootkit-persistenceanalyzing-usb-device-connection-historyanalyzing-web-server-logs-for-intrusionanalyzing-windows-amcache-artifactsanalyzing-windows-event-logs-in-splunkanalyzing-windows-lnk-files-for-artifactsanalyzing-windows-prefetch-with-pythonanalyzing-windows-registry-for-artifactsanalyzing-windows-shellbag-artifactsauditing-aws-s3-bucket-permissionsauditing-azure-active-directory-configurationauditing-cloud-with-cis-benchmarksauditing-gcp-iam-permissionsauditing-kubernetes-cluster-rbacauditing-terraform-infrastructure-for-securityauditing-tls-certificate-transparency-logsauthorization-gateautomating-ioc-enrichmentbb-methodologyblockchain-securitybounty-apibounty-mobilebounty-reconbounty-webbug-bountybuilding-adversary-infrastructure-tracking-systembuilding-attack-pattern-library-from-cti-reportsbuilding-automated-malware-submission-pipelinebuilding-c2-infrastructure-with-sliver-frameworkbuilding-cloud-siem-with-sentinelbuilding-detection-rule-with-splunk-splbuilding-detection-rules-with-sigmabuilding-devsecops-pipeline-with-gitlab-cibuilding-identity-federation-with-saml-azure-adbuilding-identity-governance-lifecycle-processbuilding-incident-response-dashboardbuilding-incident-response-playbookbuilding-incident-timeline-with-timesketchbuilding-ioc-defanging-and-sharing-pipelinebuilding-ioc-enrichment-pipeline-with-openctibuilding-malware-incident-communication-templatebuilding-patch-tuesday-response-processbuilding-phishing-reporting-button-workflowbuilding-ransomware-playbook-with-cisa-frameworkbuilding-red-team-c2-infrastructure-with-havocbuilding-role-mining-for-rbac-optimizationbuilding-soc-escalation-matrixbuilding-soc-metrics-and-kpi-trackingbuilding-soc-playbook-for-ransomwarebuilding-threat-actor-profile-from-osintbuilding-threat-feed-aggregation-with-mispbuilding-threat-hunt-hypothesis-frameworkbuilding-threat-intelligence-enrichment-in-splunkbuilding-threat-intelligence-feed-integrationbuilding-threat-intelligence-platformbuilding-vulnerability-aging-and-sla-trackingbuilding-vulnerability-dashboard-with-defectdojobuilding-vulnerability-exception-tracking-systembuilding-vulnerability-scanning-workflowbypassing-authentication-with-forced-browsingcodeqlcollecting-indicators-of-compromisecollecting-open-source-intelligencecollecting-threat-intelligence-with-mispcollecting-volatile-evidence-from-compromised-hostconducting-api-security-testingconducting-cloud-incident-responseconducting-cloud-penetration-testingconducting-domain-persistence-with-dcsyncconducting-external-reconnaissance-with-osintconducting-full-scope-red-team-engagementconducting-internal-network-penetration-testconducting-internal-reconnaissance-with-bloodhound-ceconducting-malware-incident-responseconducting-man-in-the-middle-attack-simulationconducting-memory-forensics-with-volatilityconducting-mobile-app-penetration-testconducting-network-penetration-testconducting-pass-the-ticket-attackconducting-phishing-incident-responseconducting-post-incident-lessons-learnedconducting-social-engineering-penetration-testconducting-social-engineering-pretext-callconducting-spearphishing-simulation-campaignconducting-wireless-network-penetration-testconfiguring-active-directory-tiered-modelconfiguring-aws-verified-access-for-ztnaconfiguring-certificate-authority-with-opensslconfiguring-host-based-intrusion-detectionconfiguring-hsm-for-key-storageconfiguring-identity-aware-proxy-with-google-iapconfiguring-ldap-security-hardeningconfiguring-microsegmentation-for-zero-trustconfiguring-multi-factor-authentication-with-duoconfiguring-network-segmentation-with-vlansconfiguring-oauth2-authorization-flowconfiguring-pfsense-firewall-rulesconfiguring-snort-ids-for-intrusion-detectionconfiguring-suricata-for-network-monitoringconfiguring-tls-1-3-for-secure-communicationsconfiguring-windows-defender-advanced-settingsconfiguring-windows-event-logging-for-detectionconfiguring-zscaler-private-access-for-ztnaconstant-time-analysiscontaining-active-breachcorrelating-security-events-in-qradarcorrelating-threat-campaignscredential-attackctf-cryptoctf-forensicsctf-pwnctf-revctf-stegoctf-webcve-poc-generatordeobfuscating-javascript-malwaredeobfuscating-powershell-obfuscated-malwaredeploying-active-directory-honeytokensdeploying-cloudflare-access-for-zero-trustdeploying-decoy-files-for-ransomware-detectiondeploying-edr-agent-with-crowdstrikedeploying-osquery-for-endpoint-monitoringdeploying-palo-alto-prisma-access-zero-trustdeploying-ransomware-canary-filesdeploying-software-defined-perimeterdeploying-tailscale-for-zero-trust-vpndetecting-ai-model-prompt-injection-attacksdetecting-anomalies-in-industrial-control-systems
El marketplace indica 873 piezas; guardamos los primeros 200 nombres.
Qué cambió
- Apareció en un nuevo marketplace: Community GitHub marketplaces
- Community GitHub marketplaces: apareció
El editor
26zl · Repositorio: github.com/26zl/cybersec-toolkit
Plugins similares
Productos cuyos propios nombres, descripciones, herramientas y skills son los más cercanos a este por su significado, en todos los marketplaces que leemos. La cercanía se ordena solo dentro de esta lista.
- io.github.tidynest/raven-nest-mcp
- com.pentest-tools/mcp-server
- HackTricks MCP Server
- MCP Trust & Tool-Poisoning Audit
- io.github.imouiche/mitre-attack-mcp-server
- com.dechonet/mcp
- io.github.integsec/turbopentest
- Bright Security
- AgentSec MCP
- io.github.runsec-io/mcp
Plugins similares por marketplace
La misma pregunta a cada marketplace por separado: ¿hay allí un equivalente de este plugin?
Publicado en Claude Code: claude-plugins-community (5)
Publicado en Claude Code: claude-plugins-official (5)
Publicado en Claude: knowledge-work-plugins (5)
Publicado en Codex: openai-curated (openai/plugins) (5)
Publicado en Community GitHub marketplaces (5)
Publicado en Copilot CLI: github/awesome-copilot (5)
Publicado en Copilot CLI: github/copilot-plugins (5)
Publicado en Cursor: cursor/plugins (5)
Publicado en Docker MCP Catalog (5)
Publicado en Official MCP Registry (5)
Encontrados por significado, no por código ni repositorio compartidos: los plugins similares siguen siendo productos distintos, y esto no es una reseña ni una recomendación.
¿Es tu plugin?
Demuestre que mantiene el plugin con un archivo en su repositorio, un archivo en su dominio o un registro DNS. Recibirá avisos cuando un marketplace lo publique, lo retire, cambie su marca de verificado o lo que pide, y podrá poner su endpoint remoto en monitorización como servicio web.
Datos de Official MCP Registry. Datos de Community GitHub marketplaces. Las cifras proceden de nuestros propios recorridos periódicos por los marketplaces, leída por última vez el . No publicamos datos de contacto de los editores de plugins.