📡 MCP Radar

shinthink/blitzstrike

⚡ Blitz Strike — a universal MCP penetration-testing toolbelt. Structured methodology: reconnaissance & attack-surface mapping, source-to-sink analysis, and live validation. 57 escalation chains, 130-

⭐ 634 stars
⑂ 1 forks
TypeScript
momentum ▲ 1270.0
created 2026-09-12
on radar since 2026-09-13
star trend 3 → 634 since 2026-09-13
active-directoryblue-teambug-bountycvedefensive-securityexploitmcpmcp-servernucleioffensive-securitypayloadspentestreconnaissancered-teamreverse-engineeringsecuritysecurity-toolsvulnerability-scanningwordpress
View on GitHub ↗Homepage ↗

About blitzstrike

Reconnaissance at speed. Analysis in depth. Validation before report.

Blitz Strike is a structured penetration-testing methodology — reconnaissance, source analysis, and validation — delivered as a universal MCP server. It enumerates the attack surface (BLITZ), traces source-to-sink reachability (EAGLE-EYE), and verifies each finding live before it is reported (STRIKE). One server, every agent: scope enforcement to submission-ready findings in a single runengagement call, with the relevant exploit-tool manual attached to every result.

A scan hit is a hypothesis. A live test is the verdict.

Blitz Strike exists to eliminate the two most common failure modes in automated security assessment: false positives from surface-level pattern matching, and unverified findings reported without live confirmation.

Blitz Strike is a Model Context Protocol (MCP) server (TypeScript / Bun) that packages a 3-tier security-audit methodology as callable tools — and runs the whole engagement server-side, so a single runengagement call works from Claude Code, Cursor, Hermes, OpenCode, Claude Desktop, Gemini, or any MCP client.

Blitz Strike maps a structured penetration-testing methodology — reconnaissance, source analysis, and validation — into three tool tiers executed server-side.

Tier Name Phase What it does ------------ 1 BLITZ Reconnaissance & attack-surface mapping Enumerates the exposed attack surface at scale: unauthenticated entry points, dangerous sinks, and authentication boundaries. 2 EAGLE-EYE Static analysis & data-flow tracing Traces source-to-sink reachability and enriches fi

From the project README.

Maintaining this server?

Add the radar badge to your README — it shows your project was picked up by MCP Radar and links to this page:

[![On MCP Radar](https://mcp.liqiwa.com/badge.svg)](https://mcp.liqiwa.com/s/shinthink--blitzstrike.html)

Related MCP servers

sgateway/s-gw

Local credential control for AI coding agents.

⭐ 8TypeScript
2akouwu/reverify

Stop your AI from making things up — it proposes, deterministic tools decide, every claim checked against ground truth with evidence. Grounded facts and context survive resets. Reverse engineering is

⭐ 927Python
ZeroDayEvil/ai-security-tool

🛡️ Free open-source AI-powered security terminal & vulnerability scanner (CVE, SBOM). Supports SSH, SFTP, RDP, VNC, Serial, and 12+ autonomous AI agents (DeepSeek, OpenAI) for automated security workf

⭐ 17HTML
ronitgupta138/rev-core

⚡ Autonomous reverse engineering engine & Model Context Protocol (MCP) server for binaries and applications in Systems Rust

⭐ 4Rust
Akxan/google-seo-mcp

SEO & GEO MCP server for Claude, Codex, Cursor and any MCP client: Search Console, GA4, PageSpeed, Core Web Vitals, structured data, llms.txt, AI crawler checks, WordPress (Yoast, WP-CLI over SSH), Gi

⭐ 36TypeScript
fengyincheng/ShellBridge

Give ChatGPT fast, safe, and auditable visibility into your VPS through MCP.

⭐ 4TypeScript

📬 Get the weekly radar in your inbox

The top new MCP servers of the week, every Monday. No spam, unsubscribe anytime.