AK47 for MCP
<h2>AK47: Modular security assessment and exploitation framework for professionals</h2>
- Free
- 4.7
- V v1.0.5
<h2>AK47: Modular security assessment and exploitation framework for professionals</h2>
AK47, developed by 99999G, is a multi-platform security assessment and exploitation framework designed to automate vulnerability verification and exploit testing. The app provides a high-performance core engine and cross-platform deployment across desktop environments, enabling scripted interactions and repeatable tests for complex attack paths. It combines automation with targeted developer documentation and plugin support to extend capability. Security researchers, penetration testers, and experienced defenders gain a flexible tool for reproducing and validating vulnerabilities in controlled environments.
What tasks can you actually use it for?
AK47 supports active verification and targeted exploitation tasks across network and application layers. It accepts common communication protocols and testing vectors, including TCP, UDP, HTTP, and WebSocket, and ships with integration points for external exploit toolsets such as ysoserial and Java-Chains. Built-in proxy services handle Out-of-Band and JNDI interactions, letting testers capture OOB callbacks and reproduce JNDI-related behaviour during verification. Use cases include end-to-end exploit reproduction and protocol-level fuzzing campaigns.
How accurate are the outputs compared to doing it manually?
The app's AI-driven deep interaction features assist in navigating complex verification steps and can reduce repetitive manual actions, while the core processing engine focuses on execution efficiency. Reported reception in the research community highlights the app's modularity and AI features for deeper interaction, but outputs remain tools for professionals to interpret. Generated exploit traces and verification logs require expert analysis to confirm root cause and impact before reporting.
Does it require technical knowledge to get useful results?
AK47 targets security practitioners comfortable with scripting and extension development; it includes a plugin system and documentation for custom vulnerability modules and engine scripting. The project notes a required compatible runtime environment, so setting up and authoring plugins assumes familiarity with runtime installation and security testing workflows. Teams that can write or adapt modules benefit most, while users without scripting experience face a steeper onboarding curve.
Best used as a specialist's verification toolkit, not an automated replacement for expertise
AK47 is a practical option for cybersecurity professionals who need a configurable framework for repeatable exploit verification and protocol testing. Its design supports deep, automated interaction and third-party tool integration, but the outputs rely on analyst interpretation and custom module work. Adopt the app when reproducible exploit evidence and extensible testing pipelines matter, and pair it with human review for final validation.
Pros
- Supports TCP, UDP, HTTP and WebSocket protocol testing
- Integrates with ysoserial and Java-Chains external extensions
- Built-in proxy services for Out-of-Band and JNDI interactions
- Plugin system with documentation for custom vulnerability modules
Cons
- Requires scripting and security expertise to author useful plugins
- AI-driven interaction assists testing but needs human verification
- Setup needs a compatible runtime environment as documented
AK47 for MCP
- Free
- 4.7
- V v1.0.5
Top downloads
arc-relay
arc-relay provides an MCP control plane for compliant AI agents

caido-mcp-server
Comprehensive MCP Server for AI Traffic Management
puck-scout
AI-driven MCP server for on-host security triage

mcp-proxy-firewall
mcp-proxy-firewall enforces strict agent controls for MCP environments

code-pathfinder
Comprehensive AI Security Tool for Developers
Discover more programs

agent-audit
- 4.7
- Free
Static security scanner for MCP agents and agentic workflows

node9-proxy
- 4
- Free
Node9 Proxy: AI Agent Security Tool
void-stack
- 4.8
- Free
Local MCP server for AI-driven development and codebase maintenance
aguara
- 4.7
- Free
Aguara: A Static Security Scanner for AI Agents and MCP Servers

tooltrust-scanner
- 4.6
- Free
Tooltrust Scanner: Static Security for AI Agent Tool Definitions

mcp-reticle
- 4.9
- Free
MCP Reticle: A Debugging Proxy for Model Context Protocol Integrations

assay
- 4.7
- Free
Assay: CI-Native Evidence and Policy Enforcement for Agent Systems

memory-shell-mcp
- 4.9
- Free
Memory Shell MCP: A Free Tool for Detecting and Cleaning In-Memory Web Shells
agent-bom
- 4.7
- Free
Agent Bom: An Open Security Scanner and AI Control Plane

jadx-ai-mcp
- 4.6
- Free
Jadx AI MCP: Integrating LLMs for Android Decompiler Analysis