Exploitdb

🚀 ExploitDB MCP Server

An MCP (Model Context Protocol) server that provides access to ExploitDB functionality, developed by Cyreslab.ai. This server enables AI assistants like Claude to query information on security vulnerabilities and exploits, enhancing cybersecurity research and threat intelligence capabilities.

GitHub Repository: https://github.com/Cyreslab-AI/exploitdb-mcp-server
Contact: contact@cyreslab.ai

✨ Features

• Exploit Search: Search for exploits based on keywords, CVE numbers, platforms, etc.
• Exploit Details: Obtain comprehensive information about a specific exploit, including the code.
• CVE Query: Find all exploits related to a specific CVE.
• Recent Exploits: Track newly added exploits.
• Statistics: Gain insights into the distribution of exploits across platforms, types, and years.
• Automatic Updates: Keep the database up-to-date through scheduled updates.

📦 Installation

Prerequisites

• Node.js (v16 or higher)
• npm (v7 or higher)

Installation Steps

1. Clone the repository:

   git clone https://github.com/Cyreslab-AI/exploitdb-mcp-server.git
   cd exploitdb-mcp-server
   

2. Install dependencies:

   npm install
   

3. Start the server:

   npm start
   

🛠️ MCP Configuration

To specify the ExploitDB data source in the configuration file, set REPOSITORY_URL or CSV_URL:

// In config.js
module.exports = {
  REPOSITORY_URL: 'https://gitlab.com/exploit-database/exploitdb.git',
  // Or
  CSV_URL: 'https://gitlab.com/exploit-database/exploitdb/-/raw/main/files_exploits.csv'
};

💻 Usage Examples

Download Data

The server will automatically download ExploitDB data according to the configuration. To disable the cloning feature, set CLONE_REPOSITORY to false:

npm run download -- --no-clone

Query Exploits

Use the following command to query information about exploits:

curl -X POST http://localhost:3000/context \
  -H "Content-Type: application/json" \
  -d '{"command":"exploit_search","query":"缓冲区溢出"}'

⚙️ Configuration Options

The following are the available configuration options and their default values:

📊 Data Source

This server uses data provided by Exploit Database, which is maintained by Offensive Security. The data can be downloaded via a CSV file or cloned from the ExploitDB GitLab repository.

📄 License

This project is licensed under the MIT License. Please refer to the LICENSE file for details.

🙏 Acknowledgments

• Offensive Security for maintaining the Exploit Database.
• Model Context Protocol for enabling AI assistants to access external tools.

🤝 Contribution

Contributions are welcome! Please feel free to submit a Pull Request.

If you have any feature suggestions or find a bug, please open an issue on our GitHub repository or contact us directly at contact@cyreslab.ai.