Awesome MCP

Test WHERE clause bypass via OR 1=1 variants. Sends multiple payloads (OR 1=1--, OR '1'='1, OR 1=1/*, etc.) against the target parameter and compares response lengths to the baseline. Returns baseline_length and results array. Side effects: None (read-only GET requests). Sends 7 requests total.

Bypass login via SQL comment truncation (administrator'--). Extracts CSRF token from form, then POSTs with SQLi in the username field. The -- comment truncates the password check. Returns csrf_extracted, status_code, response_length, headers, likely_bypass.

Step-by-step UNION-based data extraction. 1. Finds column count via ORDER BY. 2. Identifies string-displayable columns via UNION SELECT. 3. Extracts database name and version. 4. Lists tables and columns. Returns column_count, string_columns, db_name, db_version, tables, user_columns. Side effects: Read-only GET requests. Sends ~30 requests depending on column count.

Boolean-based blind SQLi with binary search character enumeration. Uses ASCII(SUBSTRING(...))>N technique with binary search for efficiency. Determines true/false by comparing response lengths. Returns extracted_value, characters_found, requests_sent. Side effects: Read-only. Sends ~8 requests per character (binary search on ASCII 32-126).

Time-based blind SQLi detection for MySQL, PostgreSQL, and MSSQL. Sends sleep-inducing payloads and measures response time to detect injection. Returns vulnerable, dbtype, and results array with payload, response_time, triggered. Side effects: Read-only but slow (each payload waits up to delay_seconds). Sends 3 requests.

Complete SQL injection testing methodology — from detection through data extraction with WAF bypass techniques.

Complete XSS testing methodology — WAF bypass, DOM XSS, postMessage, XSS-to-CSRF chains, CSP bypass.

Full web application penetration testing methodology — covers recon through exploitation with JWT, CSRF, SSTI, WebSocket, and cache deception testing.

Comprehensive reconnaissance methodology — passive OSINT, active enumeration, git history investigation, JS bundle analysis.

Step-by-step PCAP analysis workflow — credential extraction, attack detection, reverse shell identification, and timeline reconstruction.

SQL injection payloads, WAF bypasses, blind techniques, UNION methodology, login bypass, file read/write.

Reflected/stored/DOM XSS, filter evasion, WAF bypass, context-specific payloads, cookie theft, XSS-to-CSRF chains, CSP bypass.

Command injection operators, space/keyword/slash filter bypasses, blind detection, output redirection.

Traversal sequences, encoding bypasses, key target files for path traversal attacks.

Localhost bypass variants, allow/deny list bypasses, DNS rebinding, cloud metadata endpoints, XXE-to-SSRF, XInclude.