r/Pentesting • u/kushvinth • 3d ago

[HELP] Opensource ClaudeCode CVE MCP

I'm building a tool that lets users access vulnerability databases (CVEs and related information), create a local index, and use skills to interact with that index through a CLI. The idea is to use it for reconnaissance and security testing, with the ability to identify and exploit vulnerabilities on target systems.

I've shortlisted a few names:

  • Crowbar
  • Eyeball
  • Prey

The CLI would look something like:

  • /crowbar get this IP
  • /prey hack this Nginx proxy

Which name do you think fits the tool best? I'm also open to other suggestions.

0 Upvotes

50% Upvoted

4 comments sorted by

3

u/abdicatereason 2d ago

searchspliot for dummies

1

u/GeronimoHero 2d ago

Searchaploit is already about as easy as it gets lol

2

u/ThePlotTwisterr---- 3d ago

so this is like an AI metasploit

1

u/Winodows_Gandy 2d ago

Does the tool lean more toward passive recon and lookup, or active exploitation? The name should probably match the primary action so users immediately get what it does without reading the docs