Pentesting Cyber MCP

What is MCP?

Model Context Protocol (MCP) is an open protocol that standardizes how applications expose tools and capabilities. This repository provides MCP server implementations for 50 popular security tools.

Each MCP server:

• Wraps a security tool with a standardized interface
• Exposes tool functionality through MCP protocol
• Can be used with any MCP-compatible client
• Runs as a standalone process

Available MCP Servers

Reconnaissance (15)

Vulnerability Scanning (11)

Exploitation & Password (3)

Cloud Security (4)

Kubernetes Security (3)

Threat Intelligence (3)

Code Security (2)

Network & AD (2)

Specialized (7)

Installation

Prerequisites

• Node.js 18+
• The underlying security tool installed
• Any MCP-compatible client

Install Individual Server

# Clone the repository
git clone https://github.com/hackersatyamrastogi/pentesting-cyber-mcp.git
cd pentesting-cyber-mcp

# Install dependencies
pnpm install

# Build all servers
pnpm build

# Or build specific server
cd servers/nmap && pnpm build

Run MCP Server

# Run nmap MCP server
node servers/nmap/build/index.js /usr/bin/nmap

# Run nuclei MCP server
node servers/nuclei/build/index.js /usr/bin/nuclei

# Run metasploit MCP server
node servers/metasploit/build/index.js msfconsole

Configuration

MCP Client Configuration

Add to your MCP client config:

{
  "mcpServers": {
    "nmap": {
      "command": "node",
      "args": ["path/to/servers/nmap/build/index.js", "/usr/bin/nmap"]
    },
    "nuclei": {
      "command": "node",
      "args": ["path/to/servers/nuclei/build/index.js", "nuclei"]
    },
    "sqlmap": {
      "command": "node",
      "args": ["path/to/servers/sqlmap/build/index.js", "sqlmap"]
    },
    "metasploit": {
      "command": "node",
      "args": ["path/to/servers/metasploit/build/index.js", "msfconsole"]
    }
  }
}

Unified Server (All Tools)

Use the unified server to access all 50 tools through a single MCP connection:

{
  "mcpServers": {
    "security-tools": {
      "command": "node",
      "args": ["path/to/servers/unified/build/index.js"]
    }
  }
}

Project Structure

pentesting-cyber-mcp/
├── servers/
│   ├── nmap/
│   │   ├── src/index.ts
│   │   ├── package.json
│   │   └── README.md
│   ├── nuclei/
│   ├── sqlmap/
│   ├── metasploit/
│   ├── hydra/
│   ├── hashcat/
│   ├── ... (50 servers)
│   └── unified/
├── scripts/
│   └── generate-config.sh
├── package.json
└── README.md

Usage Example

Each MCP server exposes tools that can be called through the MCP protocol:

// Example: nmap MCP server exposes these tools
- nmap-scan          // Run port scan
- nmap-service-scan  // Service detection
- nmap-vuln-scan     // Vulnerability scripts

// Example: nuclei MCP server
- do-nuclei          // Run template scan
- get-nuclei-tags    // List available tags

// Example: metasploit MCP server
- msf-search         // Search modules
- msf-exploit-check  // Check vulnerability
- msfvenom-generate  // Generate payload

Security Notice

⚠️ For authorized testing only

• Obtain proper authorization before scanning
• Some tools require root/admin privileges
• Follow responsible disclosure practices
• Secure your API keys

See SECURITY.md for details.

Contributing

Contributions welcome! See CONTRIBUTING.md.

Add a new MCP server:

mkdir servers/my-tool
cd servers/my-tool
# Create src/index.ts, package.json, README.md

License

MIT License - see LICENSE

Author

Satyam Rastogi - @hackersatyamrastogi