vulnerability-intelligence

MCP server for Shodan — search internet-connected devices, IP reconnaissance, DNS lookups, and CVE/CPE vulnerability intelligence. Works with Claude Code, Codex, Gemini CLI, and Claude Desktop.

PatrowlHears - Vulnerability Intelligence Center / Exploits

Centralized platform for aggregating and visualizing global CVE data — including feeds from NVD, MITRE, CNNVD, JVN, CERT-FR, and more. Built to unify vulnerability intelligence across borders.

💎 Vulnerability assessment and vulnerability intelligence tool searching for vulnerabilities and exploits using keywords across multiple sources.

23-tool MCP server for CVE & vulnerability intelligence. NVD, EPSS, CISA KEV, GitHub Advisory, OSV — unified in one server. Risk scoring, bulk triage, exploit search. 2 dependencies, runs with npx.

Linux based vulnerabilities (CVE) exploit detection through runtime security using Falco/Osquery/Yara/Sigma

Shodan MCP server for Claude, Cursor & VS Code. 20 tools for passive reconnaissance, CVE/CPE intelligence, DNS analysis, and device search. 4 tools work free without an API key. OSINT and vulnerability research from your IDE.

CERT/CC's fork of the official Exploit Database repository in which we are tagging commits that include vulnerability IDs. The first commit for an ID we recognize gets the tag for that ID. Aside from adding git tags, we do not otherwise modify the code. Updates hourly.

CERT/CC's fork of Metasploit Framework in which we are tagging commits that include vulnerability IDs. The first commit for an ID we recognize gets the tag for that ID. Aside from adding git tags, we do not otherwise modify the code. Updates hourly.

Self-hosted vulnerability database API: ask "is this version vulnerable?" and get answers from NVD, OSV, CISA KEV, EPSS, distro errata (Red Hat, Oracle Linux) and vendor PSIRTs (Cisco, Fortinet, Palo Alto, ...), with fixed versions.

Exposure Likelihood Framework (ELF): A Python library for integrating and analyzing vulnerability data to improve management and prioritization.

A thin, read-only MCP server that brings PatrowlIntel CVE, EPSS, CISA KEV, exploit, and trending-attack data into Claude and any MCP client.

Technical OSINT, Artifact Analysis & Verified Reconstruction

Early vulnerability radar: detects, correlates and enriches vulnerabilities before MITRE/NVD publish them, and measures the lead time each source gains over NVD.

Offline-first Python project for ANSSI bulletin analysis, CVE enrichment, risk prioritization, and Streamlit decision support dashboard.

Top OSS Vulnerability Intelligence 🌟 Star if you like it! 🌟

Official command-line client for the Exploit Intelligence Platform

Recorded Future — independent third-party profile of a public API surface, by API Evangelist. Recorded Future is a threat intelligence platform whose Intelligence Cloud combines open-web, dark-web, technical, and customer telemetry sources via the Intelligence Graph, indexed and analyzed by Insikt Group analysts and AI.

Official MCP server for the Exploit Intelligence Platform

Built an AI-powered vulnerability intelligence platform using NVD, CISA KEV, EPSS, BGE embeddings, XGBoost, FAISS, SHAP, and Streamlit to predict exploit likelihood for 357K+ CVEs, achieving ROC-AUC 0.99 and PR-AUC 0.87.