Ce qu'il peut faire : io.github.26zl/cybersec-toolkit
Serveur MCP · 26zl
Ce que io.github.26zl/cybersec-toolkit déclare, demande et exécute, d'après les places de marché que nous lisons. S'exécute sur votre machine, dans un conteneur lancé depuis cette image : ghcr.io/26zl/cybersec-toolkit:1.3.0. Variables d'environnement demandées : 2, dont secrets : 0. Selon notre passage sur les places de marché du 2026-10-13.
Ceci n'est pas un audit de sécurité. Nous montrons ce que les places de marché publient sur ce plugin : ce qu'il déclare, ce qu'il demande et ce qu'il exécute. Nous n'exécutons ni n'examinons son code, et la mention vérifié est une déclaration de la place de marché, pas la nôtre.
Où il s'exécute
- S'exécute sur votre machine, dans un conteneur lancé depuis cette image :
ghcr.io/26zl/cybersec-toolkit:1.3.0 - S'installe dans l'outil IA comme lot de plugins ; ce qu'il lance est indiqué ci-dessous.
Ce qu'il déclare
Aucune des places de marché que nous lisons ne publie de liste d'outils pour lui.
Prompts et ressources : les places de marché que nous lisons ne les publient pas.
Ce qu'il demande
Variables d'environnement demandées : 2, dont secrets : 0. Selon : Official MCP Registry.
CYBERSEC_MCP_ALLOW_EXTERNALCYBERSEC_MCP_ALLOW_SCRIPTS
Variables d'environnement demandées : 2, dont secrets : 0. Selon : Community GitHub marketplaces.
CYBERSEC_MCP_ALLOW_EXTERNALobligatoireCYBERSEC_MCP_ALLOW_SCRIPTSobligatoire
Noms uniquement : nous ne conservons ni valeurs, ni exemples, ni descriptions de ces variables. Les places de marché que nous lisons ne publient ni scopes OAuth ni réglages d'installation.
Ce qu'il exécute en plus de MCP
Skills: 199 Selon : Community GitHub marketplaces.
acquiring-disk-image-with-dd-and-dcflddadd-toolai-llm-security-reviewai-threat-testinganalyzing-active-directory-acl-abuseanalyzing-android-malware-with-apktoolanalyzing-api-gateway-access-logsanalyzing-apt-group-with-mitre-navigatoranalyzing-azure-activity-logs-for-threatsanalyzing-bootkit-and-rootkit-samplesanalyzing-browser-forensics-with-hindsightanalyzing-campaign-attribution-evidence
Afficher les autres : 187
analyzing-certificate-transparency-for-phishinganalyzing-cloud-storage-access-patternsanalyzing-cobalt-strike-beacon-configurationanalyzing-cobaltstrike-malleable-c2-profilesanalyzing-command-and-control-communicationanalyzing-cyber-kill-chainanalyzing-disk-image-with-autopsyanalyzing-dns-logs-for-exfiltrationanalyzing-docker-container-forensicsanalyzing-email-headers-for-phishing-investigationanalyzing-ethereum-smart-contract-vulnerabilitiesanalyzing-golang-malware-with-ghidraanalyzing-heap-spray-exploitationanalyzing-indicators-of-compromiseanalyzing-ios-app-security-with-objectionanalyzing-kubernetes-audit-logsanalyzing-linux-audit-logs-for-intrusionanalyzing-linux-elf-malwareanalyzing-linux-kernel-rootkitsanalyzing-linux-system-artifactsanalyzing-lnk-file-and-jump-list-artifactsanalyzing-macro-malware-in-office-documentsanalyzing-malicious-pdf-with-peepdfanalyzing-malicious-url-with-urlscananalyzing-malware-behavior-with-cuckoo-sandboxanalyzing-malware-family-relationships-with-malpediaanalyzing-malware-persistence-with-autorunsanalyzing-malware-sandbox-evasion-techniquesanalyzing-memory-dumps-with-volatilityanalyzing-memory-forensics-with-lime-and-volatilityanalyzing-mft-for-deleted-file-recoveryanalyzing-network-covert-channels-in-malwareanalyzing-network-flow-data-with-netflowanalyzing-network-packets-with-scapyanalyzing-network-traffic-for-incidentsanalyzing-network-traffic-of-malwareanalyzing-network-traffic-with-wiresharkanalyzing-office365-audit-logs-for-compromiseanalyzing-outlook-pst-for-email-forensicsanalyzing-packed-malware-with-upx-unpackeranalyzing-pdf-malware-with-pdfidanalyzing-persistence-mechanisms-in-linuxanalyzing-powershell-empire-artifactsanalyzing-powershell-script-block-logginganalyzing-prefetch-files-for-execution-historyanalyzing-ransomware-encryption-mechanismsanalyzing-ransomware-leak-site-intelligenceanalyzing-ransomware-network-indicatorsanalyzing-ransomware-payment-walletsanalyzing-sbom-for-supply-chain-vulnerabilitiesanalyzing-security-logs-with-splunkanalyzing-slack-space-and-file-system-artifactsanalyzing-supply-chain-malware-artifactsanalyzing-threat-actor-ttps-with-mitre-attackanalyzing-threat-actor-ttps-with-mitre-navigatoranalyzing-threat-intelligence-feedsanalyzing-threat-landscape-with-mispanalyzing-tls-certificate-transparency-logsanalyzing-typosquatting-domains-with-dnstwistanalyzing-uefi-bootkit-persistenceanalyzing-usb-device-connection-historyanalyzing-web-server-logs-for-intrusionanalyzing-windows-amcache-artifactsanalyzing-windows-event-logs-in-splunkanalyzing-windows-lnk-files-for-artifactsanalyzing-windows-prefetch-with-pythonanalyzing-windows-registry-for-artifactsanalyzing-windows-shellbag-artifactsauditing-aws-s3-bucket-permissionsauditing-azure-active-directory-configurationauditing-cloud-with-cis-benchmarksauditing-gcp-iam-permissionsauditing-kubernetes-cluster-rbacauditing-terraform-infrastructure-for-securityauditing-tls-certificate-transparency-logsauthorization-gateautomating-ioc-enrichmentbb-methodologyblockchain-securitybounty-apibounty-mobilebounty-reconbounty-webbug-bountybuilding-adversary-infrastructure-tracking-systembuilding-attack-pattern-library-from-cti-reportsbuilding-automated-malware-submission-pipelinebuilding-c2-infrastructure-with-sliver-frameworkbuilding-cloud-siem-with-sentinelbuilding-detection-rule-with-splunk-splbuilding-detection-rules-with-sigmabuilding-devsecops-pipeline-with-gitlab-cibuilding-identity-federation-with-saml-azure-adbuilding-identity-governance-lifecycle-processbuilding-incident-response-dashboardbuilding-incident-response-playbookbuilding-incident-timeline-with-timesketchbuilding-ioc-defanging-and-sharing-pipelinebuilding-ioc-enrichment-pipeline-with-openctibuilding-malware-incident-communication-templatebuilding-patch-tuesday-response-processbuilding-phishing-reporting-button-workflowbuilding-ransomware-playbook-with-cisa-frameworkbuilding-red-team-c2-infrastructure-with-havocbuilding-role-mining-for-rbac-optimizationbuilding-soc-escalation-matrixbuilding-soc-metrics-and-kpi-trackingbuilding-soc-playbook-for-ransomwarebuilding-threat-actor-profile-from-osintbuilding-threat-feed-aggregation-with-mispbuilding-threat-hunt-hypothesis-frameworkbuilding-threat-intelligence-enrichment-in-splunkbuilding-threat-intelligence-feed-integrationbuilding-threat-intelligence-platformbuilding-vulnerability-aging-and-sla-trackingbuilding-vulnerability-dashboard-with-defectdojobuilding-vulnerability-exception-tracking-systembuilding-vulnerability-scanning-workflowbypassing-authentication-with-forced-browsingcodeqlcollecting-indicators-of-compromisecollecting-open-source-intelligencecollecting-threat-intelligence-with-mispcollecting-volatile-evidence-from-compromised-hostconducting-api-security-testingconducting-cloud-incident-responseconducting-cloud-penetration-testingconducting-domain-persistence-with-dcsyncconducting-external-reconnaissance-with-osintconducting-full-scope-red-team-engagementconducting-internal-network-penetration-testconducting-internal-reconnaissance-with-bloodhound-ceconducting-malware-incident-responseconducting-man-in-the-middle-attack-simulationconducting-memory-forensics-with-volatilityconducting-mobile-app-penetration-testconducting-network-penetration-testconducting-pass-the-ticket-attackconducting-phishing-incident-responseconducting-post-incident-lessons-learnedconducting-social-engineering-penetration-testconducting-social-engineering-pretext-callconducting-spearphishing-simulation-campaignconducting-wireless-network-penetration-testconfiguring-active-directory-tiered-modelconfiguring-aws-verified-access-for-ztnaconfiguring-certificate-authority-with-opensslconfiguring-host-based-intrusion-detectionconfiguring-hsm-for-key-storageconfiguring-identity-aware-proxy-with-google-iapconfiguring-ldap-security-hardeningconfiguring-microsegmentation-for-zero-trustconfiguring-multi-factor-authentication-with-duoconfiguring-network-segmentation-with-vlansconfiguring-oauth2-authorization-flowconfiguring-pfsense-firewall-rulesconfiguring-snort-ids-for-intrusion-detectionconfiguring-suricata-for-network-monitoringconfiguring-tls-1-3-for-secure-communicationsconfiguring-windows-defender-advanced-settingsconfiguring-windows-event-logging-for-detectionconfiguring-zscaler-private-access-for-ztnaconstant-time-analysiscontaining-active-breachcorrelating-security-events-in-qradarcorrelating-threat-campaignscredential-attackctf-cryptoctf-forensicsctf-pwnctf-revctf-stegoctf-webcve-poc-generatordeobfuscating-javascript-malwaredeobfuscating-powershell-obfuscated-malwaredeploying-active-directory-honeytokensdeploying-cloudflare-access-for-zero-trustdeploying-decoy-files-for-ransomware-detectiondeploying-edr-agent-with-crowdstrikedeploying-osquery-for-endpoint-monitoringdeploying-palo-alto-prisma-access-zero-trustdeploying-ransomware-canary-filesdeploying-software-defined-perimeterdeploying-tailscale-for-zero-trust-vpndetecting-ai-model-prompt-injection-attacksdetecting-anomalies-in-industrial-control-systems
La place de marché indique 873 éléments ; nous conservons les 200 premiers noms.
Qui en répond
26zl
- Aucune place de marché que nous lisons ne le marque, ni son éditeur, comme vérifié.
- Licence : MIT AND Apache-2.0 AND CC-BY-SA-4.0.
- Dernier changement constaté : 2026-10-12.
- Le dépôt github.com/26zl/cybersec-toolkit appartient au compte sous lequel l'éditeur est indiqué sur Official MCP Registry.
Comment il a évolué
Ses outils, réglages, hooks et sa composition n'ont pas changé depuis que nous le suivons.
En contexte
- Nombre médian de secrets demandés par un serveur MCP sur les places de marché que nous lisons : 0,0. Celui-ci en demande : 0.
- Part des serveurs MCP qui s'exécutent sur un serveur distant : 63 %.
Où il est publié et comment ses chiffres ont évolué
Le comparer côte à côte avec des plugins similaires
Données issues de Official MCP Registry. Données issues de Community GitHub marketplaces. Les chiffres proviennent de nos propres passages réguliers sur les places de marché, dernière lecture le . Nous ne publions aucune coordonnée des éditeurs de plugins.