LazyOwn MCP Server

by grisuno• 300•• Scanned•Claim this listing•Request removal
Developer Toolsassistant cliautonomous agentsc2 ai poweredhiveimplants

837 CLI commands. Multi-operator C2. 153 MCP tools for AI agents. The First OSS C2 with Linux native c BOF support + built-in YARA/Nuclei marketplaces.

LazyOwn is an open-source mcp server by grisuno, written mainly in HTML, with 300 GitHub stars and the AGPL-3.0 license. Its code was last updated Nov 1, 2026.

Scan summary: scanned Nov 13, 2026 at commit f244db9. Seen able to run shell commands, run dynamic code, read environment and secrets, connect to the internet. Scan policy

Scanned
Full scan at f244db9 · Nov 13, 2026
Scanned
Static code scanwarn
Secrets scanfail
Dependency audit34 known vulnerabilitiesfail
Manifestnonewarn
Buildfail
Boot & handshaken/a
Network egressn/a
Reproducible (×3)n/a

Findings (153)

  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    exfiltration issue
    Details are available to the maintainer after claiming this listing.
  • high
    backdoor issue
    Details are available to the maintainer after claiming this listing.
  • high
    backdoor issue
    Details are available to the maintainer after claiming this listing.
  • high
    backdoor issue
    Details are available to the maintainer after claiming this listing.
  • high
    backdoor issue
    Details are available to the maintainer after claiming this listing.
  • high
    backdoor issue
    Details are available to the maintainer after claiming this listing.
  • high
    backdoor issue
    Details are available to the maintainer after claiming this listing.
  • high
    backdoor issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    backdoor issue
    Details are available to the maintainer after claiming this listing.
  • high
    backdoor issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    backdoor issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    exfiltration issue
    Details are available to the maintainer after claiming this listing.
  • high
    backdoor issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    backdoor issue
    Details are available to the maintainer after claiming this listing.
  • high
    backdoor issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    backdoor issue
    Details are available to the maintainer after claiming this listing.
  • high
    backdoor issue
    Details are available to the maintainer after claiming this listing.
  • high
    backdoor issue
    Details are available to the maintainer after claiming this listing.
  • high
    backdoor issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    backdoor issue
    Details are available to the maintainer after claiming this listing.
  • high
    backdoor issue
    Details are available to the maintainer after claiming this listing.
  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • medium
    Turns off TLS certificate checking, allowing traffic interception.
    cli/commands/exfiltration.py:1154
  • medium
    Turns off TLS certificate checking, allowing traffic interception.
    cli/commands/session_ops.py:1599
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    contrib/legacy/lazy_packet_image_sniffer.py:33
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    contrib/legacy/lazy_packet_image_sniffer.py:68
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    contrib/legacy/lazycam.py:258
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    contrib/legacy/lazycam.py:323
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    contrib/legacy/lazygptcli.py:113
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    contrib/legacy/lazyhttpreverseshell.py:40
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    contrib/legacy/lazyllmchat.py:254
  • medium
    Turns off TLS certificate checking, allowing traffic interception.
    contrib/legacy/lazylogpoisoning.py:154
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    contrib/legacy/lazymariadb_rce_cve_2016-662.py:76
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    contrib/legacy/lazymariadb_rce_cve_2016-662.py:151
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    contrib/legacy/lazysearch_bot.py:110
  • medium
    Turns off TLS certificate checking, allowing traffic interception.
    contrib/legacy/lazyseo.py:216
  • medium
    Turns off TLS certificate checking, allowing traffic interception.
    contrib/legacy/lazyseo.py:234
  • medium
    Turns off TLS certificate checking, allowing traffic interception.
    contrib/legacy/lazyseo.py:236
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    core/executor.py:140
  • medium
    Turns off TLS certificate checking, allowing traffic interception.
    core/http.py:63
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    core/safe_exec.py:101
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    core/safe_exec.py:267
  • medium
    Turns off TLS certificate checking, allowing traffic interception.
    discord_c2.py:258
  • medium
    Turns off TLS certificate checking, allowing traffic interception.
    lazygui/services/teamserver_backend.py:458
  • medium
    Turns off TLS certificate checking, allowing traffic interception.
    modules/CVE-2023-28432.py:23
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    modules/auto_registry.py:1214
  • medium
    Contacts a hard-coded IP address instead of a domain name.
    modules/aws_attacks.py:150
  • medium
    Contacts a hard-coded IP address instead of a domain name.
    modules/aws_attacks.py:194
  • medium
    Contacts a hard-coded IP address instead of a domain name.
    modules/aws_attacks.py:195
  • medium
    Contacts a hard-coded IP address instead of a domain name.
    modules/aws_attacks.py:196
  • medium
    Contacts a hard-coded IP address instead of a domain name.
    modules/aws_attacks.py:197
  • medium
    Contacts a hard-coded IP address instead of a domain name.
    modules/aws_attacks.py:200
  • medium
    Contacts a hard-coded IP address instead of a domain name.
    modules/aws_attacks.py:201
  • medium
    Contacts a hard-coded IP address instead of a domain name.
    modules/aws_attacks.py:202
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    modules/cgi-bin/lazywebshell.py:35
  • medium
    Contacts a hard-coded IP address instead of a domain name.
    modules/cloud_enum.py:12
  • medium
    Contacts a hard-coded IP address instead of a domain name.
    modules/cloud_enum.py:13
  • medium
    Contacts a hard-coded IP address instead of a domain name.
    modules/cloud_enum.py:57
  • medium
    Contacts a hard-coded IP address instead of a domain name.
    modules/cloud_enum.py:58
  • medium
    Contacts a hard-coded IP address instead of a domain name.
    modules/cloud_enum.py:59
  • medium
    Contacts a hard-coded IP address instead of a domain name.
    modules/cloud_enum.py:182
  • medium
    Contacts a hard-coded IP address instead of a domain name.
    modules/cross_cloud.py:179
  • medium
    Contacts a hard-coded IP address instead of a domain name.
    modules/cross_cloud.py:180
  • medium
    Contacts a hard-coded IP address instead of a domain name.
    modules/cross_cloud.py:183
  • medium
    Contacts a hard-coded IP address instead of a domain name.
    modules/cross_cloud.py:184
  • medium
    Contacts a hard-coded IP address instead of a domain name.
    modules/cross_cloud.py:191
  • medium
    Contacts a hard-coded IP address instead of a domain name.
    modules/cross_cloud.py:192
  • medium
    Contacts a hard-coded IP address instead of a domain name.
    modules/cross_cloud.py:195
  • medium
    Contacts a hard-coded IP address instead of a domain name.
    modules/cross_cloud.py:196
  • medium
    Contacts a hard-coded IP address instead of a domain name.
    modules/cross_cloud.py:199
  • medium
    Contacts a hard-coded IP address instead of a domain name.
    modules/cross_cloud.py:200
  • medium
    Contacts a hard-coded IP address instead of a domain name.
    modules/entra_id_attacks.py:251
  • medium
    Contacts a hard-coded IP address instead of a domain name.
    modules/entra_id_attacks.py:252
  • medium
    Contacts a hard-coded IP address instead of a domain name.
    modules/entra_id_attacks.py:253
  • medium
    Contacts a hard-coded IP address instead of a domain name.
    modules/entra_id_attacks.py:256
  • medium
    Contacts a hard-coded IP address instead of a domain name.
    modules/entra_id_attacks.py:257
  • medium
    Contacts a hard-coded IP address instead of a domain name.
    modules/lazycloud.py:28
  • medium
    Contacts a hard-coded IP address instead of a domain name.
    modules/lazycloud.py:29
  • medium
    Contacts a hard-coded IP address instead of a domain name.
    modules/lazyownerweb.py:29
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    poc_tui/plugin_loader.py:188
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    poc_tui/plugin_loader.py:199
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    poc_tui/plugin_loader.py:272
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    poc_tui/plugin_loader.py:302
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    skills/lazyown_automapper.py:505
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    skills/mcp_tools/playbook_run.py:98
  • medium
    Turns off TLS certificate checking, allowing traffic interception.
    slack_c2_bot.py:198
  • medium
    Turns off TLS certificate checking, allowing traffic interception.
    telegram_c2.py:275
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    testmeneitor.py:55
  • medium
    pip@9.0.3: 9 known vulnerabilities
    PYSEC-2020-173, PYSEC-2021-437, PYSEC-2023-228, PYSEC-2026-1795, PYSEC-2026-1796 +4 more
    requirements-dev.txt
  • medium
    virtualenv@21.9.1: 15 known vulnerabilities
    GHSA-394h-qwmc-48pf, GHSA-43mp-35q3-x3fq, GHSA-494p-63j8-28p3, GHSA-558c-9hv2-4prj, GHSA-5vjq-rrrf-7h2q +10 more
    requirements-dev.txt
  • medium
    soupsieve@2.9: 4 known vulnerabilities
    GHSA-4j63-6c4x-wfg4, GHSA-mmhr-3c5m-f64f, GHSA-4j63-6c4x-wfg4, GHSA-mmhr-3c5m-f64f
    requirements-light.txt
  • medium
    Install or build failed in a clean environment
    p.linux-x86_64-cpython-311/donutmodule.o']' returned non-zero exit status 1. hint: `donut-shellcode` (v1.1) was included because `lazyown` (v0.2.161) depends on `donut-shellcode` hint: This error likely indicates that you need to install a library that provides `Python.h` for `donut-shellcode@1.1`
  • low
    Possible example credential in docs/tests: generic-api-key
    readmenator-apidocs/modules/modules.engagement_hooks.py.md:470
  • low
    Possible example credential in docs/tests: generic-api-key
    54 matches in this file
    readmenator-apidocs/modules/static.js.xterm.js.md:102
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/test_backdoor_random.py:35
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/test_credential_vault.py:34
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/test_loop_supervision.py:104
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/test_reactive_lateral_data.py:84
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/test_security_alerts_fix.py:162
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/test_wizard_llm.py:114
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/test_security_codeql_batch.py:155
  • low
    Possible example credential in docs/tests: generic-api-key
    KNOWLEDGE_BASE.md:37438
  • low
    Possible example credential in docs/tests: generic-api-key
    readmenator-maps/md/KNOWLEDGE_BASE.md:37438
  • low
    filelock@3.19.1: 4 known vulnerabilities
    PYSEC-2026-1374, PYSEC-2026-1375, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g
    requirements-dev.txt
  • low
    idna@3.9.0: 1 known vulnerability
    PYSEC-2026-215
    requirements-dev.txt
  • low
    No manifest declaring network access and environment variables (agent.json)

Network activity

During install
files.pythonhosted.orgpypi.org
While running
Not run — the code wasn't started in this scan

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

LazyOwn alternatives

View more →

Similar mcp servers in Developer Tools, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
LazyOwn (this page)
grisuno
300AGPL-3.0Nov 1, 2026Scanned, no flagged issues
MCP Use
mcp-use
11kMITOct 30, 2026Scanned, no flagged issues
MobileBuildMCP
getsentry
6.5kMITNov 1, 2026Scanned, no flagged issues
Gemini Notebook MCP CLI
jacob-bd
6.4kMITOct 27, 2026Scanned, no flagged issues
Mcporter
openclaw
5.1kMITOct 27, 2026Scanned, no flagged issues
Flint Chart
microsoft
4.5kMITNov 1, 2026Scanned, no flagged issues