Google PageRank for AI agents. 25,000+ tools indexed.

hacker-bob MCP Server

vmihalis/hacker-bob

Score: 71.2 Rank #3807 MCP Server
[![AgentRank](https://agentrank-ai.com/api/v1/badge/vmihalis--hacker-bob)](https://agentrank-ai.com/tool/vmihalis--hacker-bob/?utm_source=badge&utm_medium=readme&utm_campaign=agentrank_badge)
Are you the maintainer of vmihalis/hacker-bob? Claim this listing →

A local MCP runtime that attacks what you own and only reports what it proved. 17 CVEs across 9 projects came out of this repo. Install: npx -y hacker-bob@latest install /path/to/project, then run /bob-evaluate target.com

Add AgentRank to Claude Code Discover and compare tools like vmihalis/hacker-bob — your AI finds the right one automatically
Get API Access →
claude mcp add agentrank -- npx -y agentrank-mcp-server

Overview

vmihalis/hacker-bob is a JavaScript tool licensed under Apache-2.0. A local MCP runtime that attacks what you own and only reports what it proved. 17 CVEs across 9 projects came out of this repo. Install: npx -y hacker-bob@latest install /path/to/project, then run /bob-evaluate target.com Topics: appsec, claude-code, cve, fuzzing, mcp, model-context-protocol, offensive-security, pentesting, security, smart-contract-security.

Ranked #3807 out of 24846 indexed tools.

Ecosystem

JavaScript Apache-2.0
appsecclaude-codecvefuzzingmcpmodel-context-protocoloffensive-securitypentestingsecuritysmart-contract-security

Score Breakdown

StarsFreshnessIssue HealthContributorsDependents
Stars 15% 99

99 stars → early stage

Freshness 25% 1mo ago

Last commit 1mo ago → moderate activity

Issue Health 25% 34%

12/35 issues closed → many open issues

Contributors 10% 8

8 contributors → small team

Dependents 25% 0

No dependents → no downstream usage

npm Downloads N/A
PyPI Downloads N/A
Forks 17
Description Detailed
License Apache-2.0

Weights: Freshness 20% · Issue Health 20% · Dependents 22% · Stars 10% · Contributors 8% · How we score →

How to Improve

Freshness high impact

Last commit was 32 days ago — a recent commit would boost your freshness score

Issue Health high impact

You have 23 open vs 12 closed issues — triaging stale issues improves health

Dependents medium impact

No downstream dependents detected yet — adoption by other projects is the strongest trust signal

Badge all embed codes →

AgentRank score for vmihalis/hacker-bob
[![AgentRank](https://agentrank-ai.com/api/v1/badge/vmihalis--hacker-bob)](https://agentrank-ai.com/tool/vmihalis--hacker-bob/?utm_source=badge&utm_medium=readme&utm_campaign=agentrank_badge)
<a href="https://agentrank-ai.com/tool/vmihalis--hacker-bob/?utm_source=badge&utm_medium=readme&utm_campaign=agentrank_badge"><img src="https://agentrank-ai.com/api/v1/badge/vmihalis--hacker-bob" alt="AgentRank"></a>

Embed Widget docs →

Embed a rich score widget on your site or blog.

<script src="https://agentrank-ai.com/embed.js" data-tool="vmihalis/hacker-bob"></script>

Matched Queries

topic:mcptopic:model-context-protocol

From the README

<h1 align="center">Hacker Bob</h1>

<p align="center">
  <strong>17 Common Vulnerabilities and Exposures (CVE) IDs credited across 9 projects, all produced by Bob.</strong><br />
  One was co-reported with AISLE; one credits Bob as an additional reporter. <a href="#receipt-portfolio">Review the linked receipts.</a>
</p>

<p align="center">
  Hacker Bob is an open-source autonomous bug bounty hunter built around a local Model Context Protocol (MCP) runtime.<br />
  Run it against authorized targets or in continuous integration (CI).
</p>

<p align="center">
  <a href="https://hackerbob.ai/">
    
  </a>
</p>

<p align="center">
  <a href="https://github.com/vmihalis/hacker-bob/actions/workflows/ci.yml"></a>
  <a href="https://www.npmjs.com/package/hacker-bob"></a>
  <a href="LICENSE"></a>
  <a href="https://securityscorecards.dev/viewer/?uri=github.com/vmihalis/hacker-bob"></a>
</p>

<p align="center">
  <a href="#01-run-bob"><strong>01 RUN</strong></a> ·
  <a href="#receipt-portfolio">
Read full README on GitHub →

Get the weekly AgentRank digest

Top movers, new tools, ecosystem insights — straight to your inbox.