hacker-bob MCP Server
vmihalis/hacker-bob
[](https://agentrank-ai.com/tool/vmihalis--hacker-bob/?utm_source=badge&utm_medium=readme&utm_campaign=agentrank_badge) A local MCP runtime that attacks what you own and only reports what it proved. 17 CVEs across 9 projects came out of this repo. Install: npx -y hacker-bob@latest install /path/to/project, then run /bob-evaluate target.com
claude mcp add agentrank -- npx -y agentrank-mcp-server Overview
vmihalis/hacker-bob is a JavaScript tool licensed under Apache-2.0. A local MCP runtime that attacks what you own and only reports what it proved. 17 CVEs across 9 projects came out of this repo. Install: npx -y hacker-bob@latest install /path/to/project, then run /bob-evaluate target.com Topics: appsec, claude-code, cve, fuzzing, mcp, model-context-protocol, offensive-security, pentesting, security, smart-contract-security.
Ranked #3807 out of 24846 indexed tools.
Ecosystem
Score Breakdown
99 stars → early stage
Last commit 1mo ago → moderate activity
12/35 issues closed → many open issues
8 contributors → small team
No dependents → no downstream usage
Weights: Freshness 20% · Issue Health 20% · Dependents 22% · Stars 10% · Contributors 8% · How we score →
How to Improve
Matched Queries
From the README
<h1 align="center">Hacker Bob</h1>
<p align="center">
<strong>17 Common Vulnerabilities and Exposures (CVE) IDs credited across 9 projects, all produced by Bob.</strong><br />
One was co-reported with AISLE; one credits Bob as an additional reporter. <a href="#receipt-portfolio">Review the linked receipts.</a>
</p>
<p align="center">
Hacker Bob is an open-source autonomous bug bounty hunter built around a local Model Context Protocol (MCP) runtime.<br />
Run it against authorized targets or in continuous integration (CI).
</p>
<p align="center">
<a href="https://hackerbob.ai/">
</a>
</p>
<p align="center">
<a href="https://github.com/vmihalis/hacker-bob/actions/workflows/ci.yml"></a>
<a href="https://www.npmjs.com/package/hacker-bob"></a>
<a href="LICENSE"></a>
<a href="https://securityscorecards.dev/viewer/?uri=github.com/vmihalis/hacker-bob"></a>
</p>
<p align="center">
<a href="#01-run-bob"><strong>01 RUN</strong></a> ·
<a href="#receipt-portfolio"> Read full README on GitHub → Get the weekly AgentRank digest
Top movers, new tools, ecosystem insights — straight to your inbox.