fortitool
Decrypt and unpack supported FortiGate/FortiWiFi firmware and FAZ/FMG KVM disks, with automatic format/crypto detection. Also inspect FortiGuard PKCS#7 signatures and decrypt…
Plugin bundle · by Ali Mosajjal
About
fortitool is a plugin bundle for AI coding tools published by Ali Mosajjal. Marketplaces we read that list it: 1 (Community GitHub marketplaces). The last change we recorded was on 2026-11-05. As of our marketplace pass on 2026-11-08.
Decrypt and unpack supported FortiGate/FortiWiFi firmware and FAZ/FMG KVM disks, with automatic format/crypto detection. Also inspect FortiGuard PKCS#7 signatures and decrypt FortiOS config secrets. One static Go binary, no runtime OS packages.
What it asks for
- Installs as a plugin bundle
None of the marketplaces we read publishes its tools or the settings it asks for.
What it declares, asks for and runs, in full
Only install plugins from developers you trust. We list what marketplaces publish and do not test plugins.
Works with
- Claude Code
From the marketplaces that list it and the MCP transport it declares, as each client documents them. We do not test plugins.
Connect
Commands and configs built only from what its marketplaces declare. We do not run them for you and do not test plugins.
As a Claude Code plugin
Built from what Community GitHub marketplaces declares.
/plugin marketplace add mosajjal/fortitool
/plugin install fortitool@fortitool
Where it is published
| Marketplace | Status | Version | Figures | Verified | First seen |
|---|---|---|---|---|---|
| Community marketplace mosajjal/fortitool (Open the source on GitHub) | Listed | 0.1.0 | Forks (GitHub): 9 Stars (GitHub): 53 |
Not marked |
Each figure is the marketplace's own and is never added up across marketplaces. A marketplace that publishes no figure shows none: no number is not zero.
Listed in one community marketplace
| Marketplace | Repository | Stars (GitHub) |
|---|---|---|
| fortitool | mosajjal/fortitool | 53 |
How its figures have moved
- 2026-11-0553
- 2026-11-0653
Each dot is a day we read a different number; flat stretches are days the number did not move. Figures of different marketplaces are never added up.
What the bundle contains
As published on Community GitHub marketplaces.
Skills: 1
fortios-firmware
What changed
- Became a product we track
- Community GitHub marketplaces: appeared
Similar plugins
Products whose own names, descriptions, tools and skills are closest in meaning to this one, on every marketplace we read. Closeness is ranked within this list only.
-
Audit every client FortiGate for firmware, SSL-VPN exposure, admin accounts and license expiry.
-
Audit your Mac's security posture, understand what each finding means and why it matters, then fix what's safe, all from Claude Code. Wraps the fort CLI over your shell. Read-only…
-
Hunt zero-days by talking to binaries. 40+ tools. Hosted, OAuth + SSO, invite:
-
UniFi Network MCP server — manage network devices, clients, firewall, VPN, and more
-
mcp-pfsense io.github.antonio-mello-ai/mcp-pfsense
Manage pfSense firewalls through AI assistants — rules, DHCP, DNS, and more
-
MCP Trust & Tool-Poisoning Audit
Audit MCP servers for tool poisoning and shadowing. Scan a remote server by URL or paste its tools.
-
Offline, rule-based security checks for your repo, dependencies, AI agent config and local app.
-
Local cyber security assistant for PC issue detection, malware analysis, and system scanning
-
Install and run open-source OSINT tools in a local sandbox, asking before runs that touch a target.
-
asuswrt-mcp io.github.teefloo/asuswrt-mcp
Secure AsusWRT router administration via SSH — 42+ tools, guarded mutations
Similar plugins by marketplace
The same question asked of one marketplace at a time: is there an analog of this plugin there?
Has a listing on Claude Code: claude-plugins-community (5)
-
The agent harness for offsec. It's a plugin for Claude Code packed with skills, hooks, memory system that works best for using Claude Code to achieve ai pentest/ctf
-
MalChela is a Rust-based malware analysis toolkit for DFIR analysts and malware researchers. It exposes file triage, string extraction with IOC detection and MITRE ATT&CK mapping…
-
Pre-execution safety layer that blocks dangerous shell commands and credential file reads using pattern matching + LLM analysis. Fail-closed design.
-
Fastly development tools and platform skills
-
DeployShield is a cross-platform production safety guardrail for Claude Code and Gemini CLI. It intercepts terminal commands before execution and blocks dangerous operations…
Has a listing on Claude Code: claude-plugins-official (5)
-
Fastly development tools and platform skills
-
MCP server for terminal commands, file operations, and process management
-
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API…
-
CrowdStrike Falcon Fusion skills for authoring, deploying, and executing Fusion workflows. Includes live action discovery, YAML authoring with schema validation, workflow import…
-
Set up endorctl and use Endor Labs to scan, prioritize, and fix security risks across your software supply chain
Has a listing on Claude: knowledge-work-plugins (5)
-
Fastly development tools and platform skills
-
MCP server for terminal commands, file operations, and process management
-
Query the StackHawk platform API for security posture reporting, findings analysis, and app management. Guides agents through authentication, data retrieval, and result…
-
Configure, run, and interpret HawkScan DAST results inside Claude Code. Generates stackhawk.yml configs, runs scans via CLI or Docker, and transforms security findings into…
-
The Vanta plugin connects Claude Code to Vanta's security and compliance platform through the Vanta MCP server. It combines Vanta's test-specific remediation intelligence with…
Has a listing on Codex: openai-curated (openai/plugins) (5)
-
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API…
-
CrowdStrike Falcon Fusion skills for authoring, deploying, and executing Fusion workflows. Includes live action discovery, YAML authoring with schema validation, workflow import…
-
Codex Security workflows for security scans, analysis, and investigation.
-
Cloudflare platform plugin with curated skills for Workers, Wrangler, and Agents SDK plus the official Cloudflare API MCP server.
-
Use MagicPath to find, inspect, install, create, and edit UI components from Codex.
Has a listing on Community GitHub marketplaces (5)
-
Audit every client FortiGate for firmware, SSL-VPN exposure, admin accounts and license expiry.
-
Audit your Mac's security posture, understand what each finding means and why it matters, then fix what's safe, all from Claude Code. Wraps the fort CLI over your shell. Read-only…
-
UniFi Network MCP server — manage network devices, clients, firewall, VPN, and more
-
Offline, rule-based security checks for your repo, dependencies, AI agent config and local app.
-
Local cyber security assistant for PC issue detection, malware analysis, and system scanning
Has a listing on Copilot CLI: github/awesome-copilot (5)
-
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API…
-
CrowdStrike Falcon Fusion skills for authoring, deploying, and executing Fusion workflows. Includes live action discovery, YAML authoring with schema validation, workflow import…
-
Safe BLE diagnostics, evidence workflows, and guarded automation for AI agents.
-
windows-app-storage-inspector-cleanup
Inspect Windows application storage, understand local disk usage, and safely move approved cleanup items to the Recycle Bin.
-
See a live map of the Copilot agents on your computer, their sub-agents, their commands, and where their data goes.
Has a listing on Copilot CLI: github/copilot-plugins (5)
-
Advanced Security plugin for GitHub Copilot.
-
Toolkit for building Microsoft 365 Copilot declarative agents — scaffolding, JSON manifest development, and capability configuration.
-
mcp-apps
Generate MCP App widgets for MCP tools. Produces self-contained HTML widgets using the MCP Apps protocol.
-
Build Power Apps Canvas Apps using the Canvas Authoring MCP server.
-
code-apps-preview
Build and deploy Power Apps code apps using React, Vite, and Power Platform connectors.
Has a listing on Cursor: cursor/plugins (5)
-
Let Grok Bot reach MCP servers on your private Tailscale network: connect your own tailnet, or your team's company tailnets turned on by a team admin, with each member using their…
-
Query and remediate compliance tests, controls, frameworks, risks, and vulnerabilities in Vanta.
-
CLI-backed repo compatibility scans plus agents that audit startup, validation, and docs against reality.
-
Browse, search, and read Microsoft OneDrive files.
-
Scaffold and validate new agent plugins.
Has a listing on Docker MCP Catalog (5)
-
MCP server for terminal commands, file operations, and process management
-
Real-time network monitoring, security analysis, and firewall management through 28 specialized tools. Access security alerts, network flows, device status, and firewall rules…
-
MCP server for Shodan — host/network recon, CVE and exploit lookup, InternetDB, and persistent alerts (34 tools).
-
A comprehensive security scanner for MCP servers with YARA rules and static analysis capabilities.
-
stackhawk com.stackhawk/stackhawk
An MCP server that provides interaction with StackHawk's security scanning platform.
Has a listing on Official MCP Registry (5)
-
Audit every client FortiGate for firmware, SSL-VPN exposure, admin accounts and license expiry.
-
Hunt zero-days by talking to binaries. 40+ tools. Hosted, OAuth + SSO, invite:
-
mcp-pfsense io.github.antonio-mello-ai/mcp-pfsense
Manage pfSense firewalls through AI assistants — rules, DHCP, DNS, and more
-
MCP Trust & Tool-Poisoning Audit
Audit MCP servers for tool poisoning and shadowing. Scan a remote server by URL or paste its tools.
-
Offline, rule-based security checks for your repo, dependencies, AI agent config and local app.
Has a listing on PyPI (MCP servers) (5)
-
mikrotik-mcp io.github.jeff-nasseri/mikrotik-mcp
MCP server for MikroTik routers: firewall, NAT, routing, DHCP, DNS, WireGuard and more via SSH.
-
Secure MCP server for OPNsense firewall management via AI assistants
-
Guard Core security MCP: SecurityConfig validation, docs search, live threat detection.
-
mcp-safeguard com.cognivators/mcp-safeguard
MCP server security scanner: detects prompt injection, credential leaks, SSRF, tool poisoning.
-
Scan, enumerate, and risk-score every MCP server configured on your machine.
Has a listing on npm registry (MCP servers) (5)
-
Reverse engineer anything from your terminal or agent with one CLI and MCP server.
-
cyberchef-mcp io.github.doublegate/cyberchef-mcp
CyberChef's 504 data-transformation operations as MCP tools: encryption, encoding, forensics.
-
Detect hardcoded secrets in source and config. Reports masked previews, never the values.
-
agent-security-scanner-mcp io.github.sinewaveai/agent-security-scanner-mcp
Security layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.
-
MCP server for terminal commands, file operations, and process management
Found by meaning, not by shared code or a shared repository: similar plugins stay separate products, and this is not a review or a recommendation.
Want this mark on your plugin in our catalog?
Prove you maintain it with a file in its repository, a file on your domain or a DNS record, and you can show this mark on the card, with live banners for your site and README. How verification works
You also get alerts when a marketplace lists it, drops it, changes its verified mark or what it asks for, and its remote endpoint goes on monitoring as a web service.
Data comes from public marketplace files in GitHub repositories of their authors. Figures come from our own regular passes over the marketplaces, last read on . We publish no contact details for plugin publishers.