Claude Security Tools & MCP Server Index
Filterable. Searchable. Every entry vetted, sourced, and tagged. No SEO chum, no hallucinated repos.
Adobe Student Discount: 4 Months Creative Cloud Pro Trial
Get the entire collection of 20+ creative apps—including Photoshop, Illustrator, Premiere Pro, and Acrobat Pro at a massive discount. Also get 1 year of Adobe Express for Airtel…
Airtable Student Freebie: Free Team Plan for 6-24 Months
Free 6 to 24 months of Airtable's premium Team plan for verified college and university students.
Akamai $100 Free Credits for New Accounts
New users get instant US$100 in free credits to use Akamai Cloud (Linode) services — ideal for hosting, development, testing, or cloud experiments.
Alibaba Cloud Free Trial
A free trial program providing access to 80+ cloud products inclduing compute, storage, databases, networking, AI for entire year.
Amazon Music Free Trial: 30 Days Free (Global & India)
Claim up to 30 days of Amazon Music Unlimited for free. Active promo deals for India (30 days ) and Global/US (30 days ). Get ad-free, HD audio, and offline listening.
Amazon Prime Student Free Trial: 6 Months Free Offers
Get a 6-month free trial Amazon Prime for young adults and Student for $0. Enjoy fast free delivery, 5% cash back, and Prime Video, followed by a 50% discount on renewal.
$200 AWS Free Credits for Students and Starters
New AWS users can instantly claim $100 in cloud credits upon sign-up, with an additional $100 available for completing simple introductory tasks. This offer provides a risk-free…
Azure for Students Starter
Free access to selected Azure cloud services for verified students.
Azure for Students
Free $100 Azure credits and services for eligible students – no credit card required, valid for 12 months.
Blink.new Invite Code: Get 10 Free Bonus Credits on Signup
Sign up for Blink.new using the exclusive invite code awwdxi0i to claim 10 extra bonus credits instantly on your new account.
Bolt.new Free Tokens (5M Extra) + 50% Off for Students
Participants in the Bolt.new 10-day founder hackathon brought to you by Half Baked receive Bolt.new $25 worth of credits for a month.
Canva Student Offer: Free Access to Premium Features
Unlock premium design features for free. Canva for Education offers K-12 teachers and students access to premium tools, templates, and classroom management features.
ChatGPT Business Free for 1 Month (Pilot Offer)
A business-tier plan for teams, offering shared workspace,and admin controls — with a possible one-month free trial for eligible organisations.
Claude Student Credits: Free Claude Max 20x worth $1200
Free Claude Max 20x worth $1200 with Claude for Open Source Program for all developers who maintains a Github repo with more than 5000 Github Stars or 1,000,000+ monthly package…
Cloudflare Workers & Pages Free Tier for Hosting Projects
A professional-grade platform to host your websites (Static) and backend code (Serverless) for free forever. It offers enterprise-level speed and security without requiring a…
Cloudways Promo Code 2026: Flat 25% Off First Payment
Save on premium managed cloud hosting. Use Cloudways promo code RESOURIFY to secure a flat 25% discount on your first billing cycle.
ChatGPT Codex Student Discount: Claim $100 in Free Credits
Get $100 in free Codex credits to extend your AI coding, prototyping, and development capabilities within ChatGPT.
Consensus Student Discount: Save 40% on AI Research
Stop skimming abstract after abstract. Consensus is an AI search engine that instantly extracts and summarizes findings from scientific research. Students save 40% on premium…
Cursor AI Students Freebie: Free Pro Plan for 1 Year
A "Magic" Code Editor that uses Gemini 3 Pro, Claude 4.5 Opus and GPT-5.2 to write, fix, and explain code for you. It’s like VS Code, but with a genius developer sitting next to…
Descript Students Discount: 50% Off on Hobbyist Plan
50% discount on the Descript Hobbyist plan for students and educators to edit audio and video.
Free $200 Credits with DigitalOcean for Higher Education
Free cloud credits and resources for students, educators and researchers to use DigitalOcean infrastructure.
Duolingo Promo Code: Get 1 Month Free Trial (June 2026)
Score 1 month of free Super Duolingo access with code DUOBNBJUNE2026. Learn languages ad-free, get unlimited hearts, and unlock personalized practice.
Emergent Promo Code: Claim 7 Days Trial for $1
Grab the latest Emergent coupon codes and deals. Save up to $19 on monthly plans or get $10 off annual and Pro tiers with these verified promos.
Figma Students Credits: Free Pro Plan (Worth $144/yr)
Figma offers its powerful "Professional" design plan completely free to students and educators for 2 years (renewable).
Framer Student Discount: 50% Off on Pro Plan Subscription
50% off a 12-month Framer Pro subscription for verified students.
Free Cloud Hosting Forever: Oracle 4 OCPU & 24GB RAM for $0
Get most powerful free cloud computer on the internet free forever: a server with 4 "brains" (OCPUs), 24GB of memory and 200GB storage - enough to run game servers or heavy apps.
Free Udemy Premium Courses via 100% Discount Coupons
Students can access thousands of paid/premium courses on Udemy without paying a penny by using special "100% Off" coupons shared by instructors.
GearUP Booster Exclusive Coupon: 10% Off on Monthly Plan
Maximize your gaming performance with an extra 10% off GearUP Booster using code RESOURIFY. Stack it on top of the 60% discount to eliminate high ping and packet loss.
Gemini Enterprise 30-Day Free Trial Offer
Claim a 30-day free trial of Gemini Enterprise Business Edition to build custom AI agents, connect Workspace data, and automate workflows at zero cost.
Free GitHub Pages Static Site Hosting for Portfolios
Ongoing free static hosting for portfolios and projects directly from your GitHub repo.
GitHub Student Developer Pack
A collection of 80+ free offers and resources from developer tools, cloud platforms, design software and more, available exclusively to verified students.
Copilot Student Discount: Free Pro Plan via GitHub Student Pack
Free access to the GitHub Copilot Pro AI coding assistant for verified students.
Google Ads Promotional Credits: $2,400 Worth of Free Credits
Boost your business growth with free Google Ads credits. New advertisers can unlock up to $2,400 in promotional match credits based on initial ad spend.
Gemini Student Discount: 75% Discount for 3 Months
Save 75% on Google Gemini AI Plus and AI Pro subscriptions for 3 months. Open to all users with no student verification required.
Increase Your Google Antigravity Limits for Free (Official Method)
Learn how to increase your Google Antigravity limit for free and unlock higher resources for faster, smoother vibe coding—no paid upgrade needed.
Google Cloud Trial with $300 Free Credits
Free $300 trial credits + always-free tier of products for Google Cloud.
Google's Hidden $10/mo and $100/month Free Cloud Credit
Active Google AI Pro subscribers now receive $10/month and AI Ultra users receive $100/month in recurring Google Cloud credits to build and deploy apps.
Google Workspace Promo Code 2026: 14% Off + Free Trial
Save up to 14% on Google Workspace Business Starter (10%), Standard (12%), and Plus (14%) plans with verified 2026 promo codes from Resourify. Instant retrieval.
Grammarly Student Discount: Save 60% + 20% on Pro
Unlock Grammarly Pro for ~$9.60/month. Stop submitting average work. Start writing with the precision of a top 1% academic.
Grok Free Trial: Claim 7 Days of SuperGrok Access
Access xAI's most powerful model tier with a 7-day SuperGrok free trial. Unlock multi-agent expert modes, deeper context windows, and real-time data integration.
HashiCorp $500 Free Trial Credits for 6 Months
Get $500 in HashiCorp Cloud Platform trial credits. Use Terraform, Vault, Consul, and other HCP services to automate and secure your cloud infrastructure. Credits valid for 6…
HostGator Promo Code 2026: 73% Off Hosting + Free Domain
Use the HostGator promo code SNAPPY to get up to 73% off shared hosting, discounts on VPS and dedicated servers, plus a free domain name.
IBM Cloud Free Tier: $200 Credits + 40 Always-free Products
Free access to IBM Cloud with always-free Lite plans plus USD $200 credits for new users, suitable for students and educators.
Jasper AI Free Trial: 7-Day Risk-Free Access to the Pro Plan
Get a 7-day free trial of Jasper AI, the purpose-built AI platform for marketing performance. Create on-brand content, blogs, and social posts risk-free.
JetBrains Student Pack (Free Industry-Standard IDEs)
Stop using basic text editors. Get the exact same powerful tools used by Netflix, Google, and Twitter engineers—completely free while you study.
Jio 50GB Free Cloud Storage
Jio can secure 50GB of free cloud storage to back up projects, photos, pdfs, docs and digital notes without any subscription fee.
Jio Gemini Pro Offer (18 Months Free)
Pro plan of Google Gemini worth ₹35,100 Free for 18 months with Jio. Free for all Jio Unlimited 5G users aged 18 years and above. no additional cost.
Kiro Student Discount: 1,000 Free Credits + $20 Bonus
Claim 1,000 free monthly developer credits for 12 months with the Kiro Student tier (save $240). Available for eligible school students via SheerID verification.
Koofr Free 10GB Privacy-Focused Cloud Storage
Koofr provides a secure, European-based cloud storage service that gives students 10GB of free space forever. It allows users to connect and view files from other accounts like…
LCN Free .co.uk Domain Name for 1 Year
Grab a free .co.uk domain for 12 months at LCN. Limit one per account for new purchases.
LinkedIn Premium Free Trial: 1 Month + Free Perks for 2026
Unlock a 30-day LinkedIn Premium free trial. Access direct 30 InMail messaging credits, full profile viewer insights, and advanced AI career tools for $0.
Lovable Promo Code 2026: 50% Student Discount + 1 Year Free
Get a 50% when you subscribe to Lovable AI Pro plan for a year as a studenta and also get 50% off limited time discount code. You can save upto $150 off per year with this…
Manus AI Student Discount: Free Campus Access & Credits
Bypass the Manus AI waitlist instantly with an .edu email. Get free Campus access, 300 daily credits, and 1k bonus credits per referral. Claim the deal now.
Mega Free 20GB Cloud Storage for Life
A secure, lifetime free account offering 20GB of cloud storage with top-tier privacy encryption, ideal for storing large research papers, multimedia projects, and backups.
Free Microsoft Office 365 Education for 12 Months
College students can unlock a full year of premium productivity tools, including Microsoft 365 apps, Copilot AI, 1TB of cloud storage, and LinkedIn Premium Career features at no…
MongoDB Student Credits: Free Certification and $150 Voucher
Claim a free GitHub Certification exam voucher (expires June 30, 2026) and a $150 MongoDB certification voucher by completing their learning path.
MultCloud License Code for 200GB Storage + 1-Year Premium
Claim a free 1-year MultCloud Premium subscription with 200GB data transfer bandwidth to effortlessly sync, backup, and manage files across 30+ cloud services.
Murf AI Students Discount: 20% Off on Premium Plans
20% discount on Murf AI's premium text-to-speech subscription plans for verified students and educators.
Namecheap Student Offer: Free .me Domain + SSL
Free 1-year .me domain and SSL certificate for students.
Free Netlify Starter Plan for Front-End Hosting (100GB/mo)
Ongoing free Starter tier for hosting static sites and front-end apps with 100GB of monthly bandwidth.
New Relic Student Freebie: Free 500GB Data/Mo & 3 Users
Free 2-year access to New Relic's Student Edition, including 500GB/month of data ingest and 3 full platform users.
NordVPN Promo Code 2026: Free 3 Months with LinkedIn
Unlock 3 months of NordVPN Basic for free through LinkedIn Premium Perks. Secure your data, bypass geo-blocks, and enjoy high-speed browsing at zero cost.
Notion Student Discount: Free subscription and 3-month free trial
Upgrade your workspace for free. Get unlimited file uploads, unlimited pages, and version history to manage all your assignments, thesis work, and club projects without hitting…
OpenArt Promo Code: 15% OFF + 90 Free Credits (2026)
Save 15% on your first month of OpenArt with a permanent promo code GET15 and claim up to 90 free AI art generation credits today.
Oracle Cloud Free Credits: $300 + 27 Always-Free Services
Oracle Cloud Free Tier gives individuals, students and educators US $300 cloud credits (valid for 30 days) and a suite of “Always Free” cloud services.
OVHcloud Public Cloud Free Trial ($200 Credit)
OVHcloud gives new users free credits to try Public Cloud services before paying.
Parallel.ai Free $80 Credits With Your Work Email
Instantly unlock $80 in API credits to power your AI agents with state-of-the-art web search and deep research capabilities.
Perplexity Student Discount: 50% Off + 7 Days Free Trial
Unlock the full "Pro" research suite for just $9/month (normally $20). This student-exclusive plan includes access to the newest GPT-5.2 and Claude Sonnet 4.5 models, plus…
PixVerse Invite Code & Free Credits + 40% Off Yearly Plans
Grab the latest active PixVerse invite code 2WTW0UT0 to claim 100 bonus video credits instantly, plus unlock up to 4,340 free credits via app milestones.
50% Off Raycast Student Discount on Pro Plan (Worth $48/year)
Supercharge your Mac workflow with the Raycast Pro plan. Students get a massive 50% discount on the subscription, unlocking Cloud Sync, unlimited Clipboard History, and…
Replit Student Discount: 50% Off + Instant $20 Off
Instant $20 off + earnn $80 on Replit today. Use this verified Replit student discount promo code at checkout to reduce your coding workspace costs.
Runway Student Discount: Free 100K Credits + 25% Off
University students and educators can claim a 25% discount on all individual Runway subscription plans, which provide advanced AI tools for text-to-video creation and editing.
Scite.ai Student Discount: Save upto 40% Off
Save 40% on Scite.ai, the only AI tool that verifies if research claims are supported or contrasted by actual science.
Sketch Students Freebie: Free Educational Plan for 1 Year
Free 1-year renewable access to Sketch's Mac app and workspace for verified students and educators.
Slack Student Discount: Get 85% Off Pro or Business+ Plan
Massive 85% discount on Slack's paid plans for student organizations, clubs, and educational groups.
Free AI Photo Editor (SoftOrbits): Free Lifetime License
Stop wrestling with complex editing software. Remove unwanted objects, restore old photos, and enhance quality automatically with this AI-powered tool.
Squarespace Student Discount: 50% Off on Annual Plan
Get 50% off your first full year of any new annual Squarespace website plan.
Sync.com Free 5GB Encrypted Cloud Storage
A permanently free cloud storage plan that provides 5GB of secure, encrypted space for backing up files, photos, and documents with strict privacy protections.
Tencent Cloud 50GB Free Trial
Tencent Cloud offers a free-tier for many of its cloud products plus education-solutions for institutions. Also get $50–$100 credit afterward.
UpCloud Free $250 Cloud Credits for Students
Get $250 in UpCloud free cloud server credits to build, test, and host websites or applications on one of the world's fastest cloud platforms. Perfect for students and beginners…
v0 Students Discount: Get 1 Year Premium Plan Free Trial
Claim 1 year of free v0 Premium status to design, iterate, and scale full-stack web applications using collaborative AI.
Vercel Free Forever Hobby Plan
Offers a free-forever tier for personal, educational and non-commercial web projects, with core deployment, CDN and function usage built in.
$300 Vultr Free Credits using Promo Code
Vultr offers $300 free for credit-based cloud trial access to new users for 30 days. Deploy and test your cloud applications with these free credits.
Wispr Flow 3 Month Free + 50% Student Discount
A voice-to-text AI dictation tool offering students 3 free months of the Pro plan followed by 50% off. Students verifying with email address.
Writesonic Student Discount: 30% Off off on Annual Plans
30% discount on Writesonic's annual AI writing and SEO subscriptions for verified students.
Xiaomi MiMo $2 Free API Credits with Invite Code A2EVEY
Use Xiaomi MiMo referral code A2EVEY to claim $2 free API credits instantly and get 10% off your first Token Plan subscription.
YC AI Student Starter Pack: $25,000+ free cloud credits
A massive $25,000+ suite of free cloud and AI API credits designed to help students build, experiment, and ship AI products without spending a dime.
You.com Offering $100 API Free Trial
Get $100 worth of free credits to build your own AI tools, search bots, or "agents" using You.com's smart technology.
YouTube Premium Free Trial: 6 Months + 50% Student Discount
Grab the 2026 YouTube Premium Student deal to get a 1-month free trial + 3 months and 6 months trial followed by a deeply discounted monthly rate for ad-free streaming and…
PentestGPT
Autonomous penetration testing assistant that drives Claude (and other LLMs) through recon, vuln discovery and exploitation reasoning end-to-end.
CAI — Cybersecurity AI Framework
Open framework wiring Claude into CTF solving, web exploitation and binary analysis loops with tool-use sandboxes.
hackingBuddyGPT
Academic Linux privilege-escalation agent. Drops you on a target box and lets the LLM iterate enumeration → exploit → loot.
Vulnhuntr
Static analysis agent that uses Claude to find remotely exploitable zero-days in open-source Python projects — has CVEs to its name.
Nuclei + Claude Triage Pipeline
Pipes Nuclei scan output into Claude to deduplicate, prioritise and write exploit narratives for bug bounty reports.
Shennina
Automated exploitation framework that uses an LLM brain to pick Metasploit modules against discovered services.
BurpGPT
Burp Suite extension that ships requests/responses to Claude for traffic-aware vulnerability hypotheses and parameter fuzzing ideas.
AI Exploits
Collection of real CVEs and PoCs targeting AI/ML supply-chain components — perfect playground for Claude-driven exploit dev.
Model Context Protocol — Reference Servers
Canonical MCP servers (filesystem, git, github, postgres, fetch). Foundation for everything else on this page.
MCP Nmap Server
Exposes nmap to Claude as a structured tool — full flag surface, safe-mode guards, JSON-typed scan results.
Metasploit MCP
Lets Claude search modules, set options, launch handlers and read session output from a live msfrpc instance.
GhidraMCP
Reverse-engineering MCP that gives Claude function listings, decompiled C and cross-references straight out of Ghidra.
Binary Ninja MCP
Same idea for Binary Ninja users — symbol lookup, decompilation, structural analysis driven by Claude.
Burp Suite MCP
Wires Burp proxy history, scanner findings and Repeater into Claude for end-to-end web-app testing loops.
Shodan MCP
Query Shodan, lookup hosts, run search facets and CVE pivots from inside a Claude conversation.
VirusTotal MCP
Hash, URL and file reputation lookups exposed as MCP tools — ideal for SOC and IR Claude workflows.
Wireshark MCP
Exposes pcap parsing, conversation stats and follow-stream to Claude — natural-language packet analysis for IR and CTF forensics.
Kali MCP Server
Wraps the Kali toolset (nmap, gobuster, sqlmap, hydra, john) as MCP tools — Claude can drive an entire kill chain end-to-end.
Semgrep MCP
Official Semgrep MCP — Claude runs rules, triages findings and writes auto-fix patches inside any IDE.
OSV / Dependency MCP
Queries the OSV vulnerability database and lockfiles directly from Claude — instant SBOM-aware vuln triage.
Gemini CLI
Google's open-source terminal agent for Gemini 2.5/3 Pro — 1M-token context, built-in shell / file / web tools, ReAct loop. Drop-in alternative to Claude Code for recon, code audit and exploit dev.
Hermes 4 (Nous Research)
Uncensored open-weights Llama-3.1 405B fine-tune. Strong at offensive security reasoning, exploit narration and tool-use without the refusal tax of frontier models.
OpenAI Codex CLI
OpenAI's terminal coding agent (GPT-5 / o-series). Useful counterpart to Claude Code for cross-model security audits and PoC generation.
Aider
Model-agnostic AI pair-programmer (Claude, GPT-5, Gemini, DeepSeek, local). Great for git-aware code-audit loops and patch generation.
OpenCode
Open-source, provider-agnostic terminal coding agent. Plug Claude, Gemini, GPT, Hermes or local models into the same recon/audit workflow.
Cline
VS Code autonomous coding agent supporting Claude, Gemini, GPT, DeepSeek. Powerful for in-editor exploit prototyping and patch review.
Nuclei AI Templates
ProjectDiscovery's AI-assisted Nuclei template generator — describe a vuln in English, get a working template. Pair with Claude for bug-bounty 0-day chasing.
Fabric
Open-source framework of 200+ vetted prompts (patterns) for security analysis, threat modelling, CVE summarisation, log triage. Pipes into any LLM.
h4cker — AI Security Resources
Omar Santos's massive curated index of offensive AI, defensive AI, red-team labs and learning paths. Updated weekly.
The Claude Bug Bounty Playbook
How to use Claude Code to triage scope, generate one-shot Nuclei templates, write disclosure narratives and chain low-sev issues into criticals.
HackerOne — Hacker Powered LLM Security
Field guide from HackerOne on using LLMs in bounty workflows: report writing, payload crafting, prompt-injection class bugs.
Claude Code for Recon Automation
Drops Claude Code into a recon pipeline: subdomain enum, JS file scraping, secret discovery, then automatic write-up generation.
Anthropic Model Safety Bug Bounty
Official program targeting universal jailbreaks and safety bypasses in Claude. Read scope before testing.
Anthropic Prompt Library
Official, vetted system prompts. Includes code review, threat modelling, regex generation and report summarisation prompts.
Awesome Claude Security Prompts
Community-maintained list of battle-tested system prompts for SOC analyst, red team operator, malware analyst and reverse engineer personas.
Leaked System Prompts
Public mirror of leaked / disclosed system prompts (including Claude, Cursor, Devin). Goldmine for prompt-injection research.
garak — LLM Vulnerability Scanner
Nikto-for-LLMs. Probes Claude for prompt injection, data leakage, toxicity, jailbreak susceptibility and encoding attacks.
promptfoo
Eval and red-team framework. Run hundreds of jailbreak / injection probes against Claude and diff results across model versions.
PyRIT
Microsoft's Python Risk Identification Toolkit for generative AI. Automated red-teaming with orchestrators, scorers, converters.
JailbreakBench
Open benchmark with 100 attacker behaviours used to evaluate Claude, GPT and open-source model robustness.
Many-Shot Jailbreaking
Anthropic's own research on long-context jailbreaks — required reading for AI red teamers building robust prompt defenses.
Indirect Prompt Injection in the Wild
Catalog of real-world indirect prompt injection vectors targeting Claude-powered SaaS — and how to defend.
Agent Hijacking Taxonomy
Taxonomy of attack patterns against tool-using agents — applies directly to Claude with MCP servers granting filesystem / shell access.
Reverse Engineering Malware with Claude
Step-by-step methodology for feeding Ghidra decompilations to Claude and getting accurate behavioural analysis without hallucinating IOCs.
Malimite
iOS / macOS malware decompiler with Claude assistance baked in — naming, comments and behaviour summaries from raw Mach-O.
Gepetto
IDA Pro plugin that calls Claude to rename functions, explain pseudocode and identify algorithms inside disassembly.
Sigma Rule Generation with Claude
Method for converting threat reports and Atomic Red Team tests into validated Sigma detection rules using Claude.
DFIR Triage with Claude
Patterns for using Claude to summarise KAPE outputs, timeline EVTX, and produce executive-ready incident summaries.
Claude in the SOC
Production patterns from blue teams running Claude on alert triage, IOC enrichment and analyst-tier-1 augmentation.
Claude Code for Security Audits
How to drive Claude Code as a terminal-native auditor: taint flow tracing, sink discovery, PoC exploit generation.
Semgrep + AI Triage
Pipeline that runs Semgrep, then uses Claude to triage findings, drop false positives and rank by exploitability.
OWASP LLM Top 10 (2025)
Canonical list of LLM vulnerabilities: prompt injection, insecure output handling, supply chain, model DoS, sensitive disclosure.
MITRE ATLAS
Adversarial threat matrix for AI systems — tactics, techniques and real-world case studies including LLM agents.
Constitutional AI
How Anthropic's Constitutional AI principles translate into building security agents that refuse harmful side-effects.
MCP Security Best Practices
Official guidance for sandboxing MCP servers, scoping tool surface and preventing prompt-injection-driven tool abuse.
Anthropic Skill Courses
Free, official courses on prompt engineering, tool use, real-world prompting and API fundamentals.
Red-Teaming LLM Applications
DeepLearning.AI short course on red-teaming LLM apps — directly applicable to Claude-backed products.
PortSwigger Web Security Academy — LLM Attacks
Free labs covering prompt injection, insecure output handling and LLM-driven attacks against web apps.
Awesome LLM Security
The reference meta-list: tools, papers, datasets, defences, attacks. Update cadence is excellent.
Awesome MCP Servers
Curated index of MCP servers — over 500 entries spanning recon, exploitation, OSINT, dev tooling.
Awesome Claude AI
General-purpose Claude awesome list with a strong security/agent sub-section.
Claude Code
Anthropic's official terminal-native agent. Reads/edits code, runs shell, drives MCP servers — the canonical Claude offensive/defensive workhorse.
Claude Engineer
Interactive CLI that lets Claude self-improve its own toolset — autonomous file ops, code analysis and security audit loops.
smol developer
Tiny Claude-driven dev agent — scaffolds whole codebases from a prompt. Adapted for PoC exploit and CTF tooling generation.
Plandex
Terminal AI agent for complex multi-file changes with diff-based review. Useful for large security refactors and code-base hardening.
Goose (Block)
Block's open-source on-machine agent — Claude/GPT/local, MCP-native. Pluggable extensions for shell, edit, computer-use.
Open Interpreter
Lets LLMs run code (shell, Python, JS, AppleScript) locally with full host access — Claude-compatible. Bread-and-butter for ad-hoc offensive automation.
ShellGPT
Command-line productivity tool powered by Claude/GPT — generates shell one-liners for recon, log triage, IR forensics.
Claudia
GUI + agent runtime for Claude Code with project sandboxing, MCP management and replayable security audit sessions.
Crush (Charm)
Charm's terminal AI coding agent — beautiful TUI, MCP-native, multi-provider (Claude, GPT, Gemini, local). Great for SSH-only ops.
Qwen Code
Alibaba's open-source CLI agent forked from Gemini CLI, tuned for Qwen3-Coder. Useful uncensored alternative for offensive workflows.
Kimi CLI
Moonshot Kimi K2 1T-param terminal agent — long-context code audit and exploit drafting with a generous free tier.
DeepSeek Coder CLI
Self-hostable DeepSeek-V3 terminal coding agent. Strong code reasoning, weak refusal guardrails — favored for red-team PoCs.
Roo Code
Fork of Cline with multi-mode personas (architect, ask, code, debug). Swap between exploit dev and defensive review mid-session.
Continue.dev
Open-source IDE autopilot — Claude / GPT / local. Custom slash-commands make it a great Burp/Semgrep companion for code audits.
llm (Simon Willison)
Swiss-army CLI for any LLM (Claude, GPT, local). Plugin ecosystem includes prompt-injection probes and log triage helpers.
mods (Charm)
AI on the command line — pipe nmap/ffuf/gobuster output straight into Claude for inline triage and report drafts.
AIChat
All-in-one terminal LLM client (Claude, GPT, Gemini, local). REPL, shell-assist, RAG, function calling — single Go binary.
Agentic Radar
Open-source security scanner for AI agent workflows — maps tools, models, MCP servers and surfaces prompt-injection / data-exfil risk.
MCP-Scan (Invariant Labs)
Security scanner for MCP servers and clients — detects tool poisoning, rug-pulls, cross-server shadowing and prompt-injection sinks.
promptmap
Automated prompt-injection vulnerability scanner for Claude/GPT-powered LLM apps — fuzzes system prompts to find leakage paths.
AgentDojo
Benchmark for evaluating tool-use agent security against prompt injection — Claude/GPT/Gemini comparative attack success rates.
Rebuff
Self-hardening prompt-injection detector — combines heuristic, LLM-based and vector-DB canary detection for Claude apps.
LLM Guard
Comprehensive input/output scanner for LLM apps — PII redaction, prompt-injection blocking, toxicity, jailbreak heuristics.
ModelScan
Static scanner for ML model files (pickle, h5, savedmodel) — detects code-exec backdoors in HuggingFace artifacts before you load them.
Counterfit (Microsoft)
Microsoft's CLI for adversarial ML attacks — evasion, extraction, inversion. Useful when chaining Claude with classifier-based defenses.
Vigil LLM
Detects prompt injections, jailbreaks and untrusted inputs — scanners for Claude/GPT-powered chatbots, RAG and agents.
MCP-for-Security
Curated MCP servers wrapping security tooling (sqlmap, ffuf, masscan, nuclei, amass) — plug-and-play offensive stack for Claude.
Damn Vulnerable MCP
Intentionally vulnerable MCP server — practice attacking tool-poisoning, indirect prompt injection and confused-deputy bugs in Claude agents.
Awesome MCP Security
Dedicated awesome list for MCP security — attacks, defenses, scanners, sandboxing patterns, real-world CVEs.
Awesome AI Security
DeepSpace's master AI/LLM security index — defensive tooling, offensive frameworks, papers, courses, datasets, vendors.
Awesome LLM Red Teaming
Living list of LLM red-team techniques, public jailbreaks, payload corpora and tooling — Claude/GPT/Gemini coverage.
Embrace The Red (Johann Rehberger)
Canonical research blog on Claude / ChatGPT / Copilot agent attacks — indirect prompt injection, data exfil, ASCII smuggling, ZombAIs.
Simon Willison — Prompt Injection
The canonical body of work on prompt injection, exfiltration via markdown images, and LLM-app threat modeling.
CyberSec-MCP Tools
All-in-one cybersecurity MCP server (whois, dig, traceroute, shodan, virustotal, exploitdb, cve search) — one config for Claude.
BloodHound MCP
Exposes BloodHound AD attack paths to Claude — natural-language Active Directory privilege-escalation pathfinding.
Volatility MCP
Memory-forensics MCP — Claude drives Volatility3 plugins against memory dumps for IR investigations.
SQLMap MCP
Wraps sqlmap so Claude can autonomously fingerprint, enumerate and dump SQLi targets with safe-rate guards.
OWASP ZAP MCP
Drives OWASP ZAP active/passive scans from Claude — site enum, alert triage, custom auth scripts.
YARA MCP
Run YARA rules over samples/memory and let Claude write and refine detection rules from threat reports.