Pentest Tools

🚀 Penetration Testing Tool MCP Server

A Model Context Protocol (MCP) server designed for penetration testing tools, compatible with various Large Language Model (LLM) clients such as Claude Desktop, Roo Code, and other clients supporting the MCP protocol.

✨ Features

• Comprehensive Penetration Testing Tools:
  • Directory scanning (FFuf, Dirsearch)
  • Vulnerability scanning (Nuclei, XSStrike)
  • API testing
  • Base reconnaissance
  • And many more...
• Pre-configured wordlists from SecLists
• Automated report generation
• Claude Desktop integration

📦 Prerequisites

• Docker and Docker Compose (for containerized setup)
• Claude Desktop application or other MCP-compatible clients
• Python 3.10+ and uv (for local setup)

📁 Directory Structure Setup

1. Create the required directories:

# Create directories
mkdir -p reports templates wordlists

2. The directory structure should look like this:

pentest-tools/
├── reports/          # For storing scan reports
├── templates/        # For report templates
├── wordlists/        # For custom wordlists
├── pentest-tools-mcp-server.py
├── config.json
├── requirements.txt
├── docker-compose.yml
└── Dockerfile

🛠️ Installation and Configuration

Docker Setup (Recommended)

1. Build and start the container:

docker-compose up -d --build

2. Verify that the container is running:

docker-compose ps

3. To view the logs:

docker-compose logs -f

Local Setup

1. Install the dependencies:

uv venv
source .venv/bin/activate  # On Windows: .venv\Scripts\activate
uv pip install -r requirements.txt

2. Install the required system tools (take Ubuntu/Debian as an example):

sudo apt-get install nmap whatweb dnsrecon theharvester ffuf dirsearch sqlmap

🔗 Claude Desktop Integration

1. Configure Claude Desktop:

Windows:

%APPDATA%\Claude\claude_desktop_config.json

MacOS/Linux:

~/Library/Application Support/Claude/claude_desktop_config.json

2. Add the server configuration:

For Docker setup:

{
    "mcpServers": {
        "pentest-tools": {
            "command": "docker-compose",
            "args": ["up"],
            "env": {
                "PORT": 5005
            }
        }
    }
}

3. Add a new MCP Server in Claude Desktop:
   • Name: Pentest Tools
   • Type: MCP
   • Address: localhost:5005

💻 Usage Examples

Basic Usage

• Scan a target system:

python pentest-tools-mcp-server.py scan --target <target_address>

Advanced Usage

• Run a penetration test:

python pentest-tools-mcp-server.py exploit --payload <attack_payload>

📁 Directory Structure Explanation

pentest-tools/
├── reports/          # Location for storing scan result reports
├── templates/        # Folder for custom report templates
├── wordlists/        # Commonly used scan wordlist library
├── pentest-tools-mcp-server.py # Main server program
├── config.json       # Tool configuration file
├── requirements.txt  # Python dependency management
└── docker-compose.yml# Docker container configuration

⚠️ Security Precautions

⚠️ Important Note

• Always ensure that you have permission to scan the target system.
• Update the tools and dependencies in a timely manner.
• Carefully review the scan results.
• Follow the responsible disclosure guidelines.