Ez Xbow Platform MCP

🚀 EZ XBow Challenge MCP

A Model Context Protocol (MCP) server for AI-driven penetration testing competitions. This tool provides a comprehensive API interface, enabling LLMs to autonomously participate in CTF challenges.

💡 Usage Tip

It is recommended to use it in conjunction with kimi-cli-for-xbow or integrate it into your own Agent workflow.

✨ Features

• Challenge Management - List, attempt, and submit solutions for CTF challenges.
• Knowledge Base - Built-in CTF technical documentation covering 9 vulnerability categories.
• Persistent Kali Container - Execute security tools (nmap, sqlmap, gobuster, etc.) in an isolated environment.
• Attempt History - Track and share discoveries across sessions through automatic note management.
• Multiple Protocols - Support stdio, SSE, and HTTP/2 streaming modes.

🚀 Quick Start

Prerequisites

• Go 1.24.7+
• Docker with buildx support

Build

go build -o xbow-mcp ./cmd/main.go

Run with the Mock Platform (Testing)

Create corresponding challenge files in ./mock-challenges according to the template.

{
    "challenge_code": "XBEN-123-24",
    "difficulty": "easy",
    "points": 200,
    "target_info": {
        "ip": "192.168.5.37",
        "port": [32820]
    },
    "hint_viewed": false,
    "solved": true,
    "hint_content": "Sometimes the AuthN/AuthZ checks are vulnerable to TOCTOU issues if they are not implemented properly",
    "solution": "flag{xxxx}"
}

Start command:

./xbow-mcp --mock  -listen 127.0.0.1:8080

Run with the Real Platform

./xbow-mcp \
  -xbow-url https://your-xbow-platform.com \
  -xbow-token YOUR_AUTH_TOKEN \
  -mode streamable \
  -listen 127.0.0.1:8080

💻 Usage Examples

Available Tools

Command-Line Options

# Server mode
-mode, -m [stdio|sse|streamable]       MCP server protocol (default: streamable)
-listen, -l ADDR:PORT                  Listening address (default: 127.0.0.1:8080)

# Platform configuration
-xbow-url, -u URL                      XBow API base URL
-xbow-token, -t TOKEN                  Authentication token

# Docker configuration
-docker-container, -c NAME             Container name (default: xbow-kail)
-docker-image, -i IMAGE:TAG            Docker image (default: xbow-kail:latest)
-dockerfile-dir, -f PATH               Dockerfile path (default: ./Dockerfile)
-docker-exec-log-dir, -d DIR           Execution log directory (default: ./.kail-history)

# Mock platform (local testing)
--mock                                 Enable the mock platform server
-mock-addr ADDR:PORT                   Mock server address (default: 127.0.0.1:8000)
-mock-dir PATH                         Mock challenge directory (default: ./mock-challenges)

📚 Documentation

Integration

MCP Client

Add the following to your MCP client configuration:

{
    "mcpServers": {
        "ezmcp": {
            "url": "http://127.0.0.1:8080/mcp"
        }
    }
}

Local Storage

• .challenge_history/{challenge_code}/ - Attempt metadata, notes, and history.
• .kail-history/ - Command execution records.

TODO

• Automatically compile and start the XBOW range and configure challenge information.

📄 License

This project is open source. For details, please refer to the LICENSE file.

Contribution

We welcome issues and pull requests.