Exploitdb

🚀 ExploitDB MCP Server

An MCP (Model Context Protocol) server that provides access to ExploitDB functionality, developed by Cyreslab.ai. This server enables AI assistants like Claude to query information about security vulnerabilities and exploits, enhancing network security research and threat intelligence capabilities.

GitHub Repository: https://github.com/Cyreslab-AI/exploitdb-mcp-server
Contact: contact@cyreslab.ai

🚀 Quick Start

The ExploitDB MCP Server allows you to access ExploitDB features easily. Here's a quick guide to get you started.

✨ Features

• Exploit Search: Search for exploits by keyword, CVE number, platform, etc.
• Exploit Details: Get comprehensive information about a specific exploit, including the code.
• CVE Query: Find all exploits related to a specific CVE.
• Recent Exploits: Keep track of newly added exploits.
• Statistics: Gain insights into the distribution of exploits by platform, type, and year.
• Automatic Updates: Keep the database up-to-date through scheduled updates.

📦 Installation

Prerequisites

• Node.js (v16 or higher)
• npm (v7 or higher)

Installation Steps

1. Clone the repository:

   git clone https://github.com/Cyreslab-AI/exploitdb-mcp-server.git
   cd exploitdb-mcp-server
   

2. Install dependencies:

   npm install
   

3. Start the server:

   npm start
   

📚 Documentation

MCP Configuration

To specify the ExploitDB data source in the configuration file, set REPOSITORY_URL or CSV_URL:

// In config.js
module.exports = {
  REPOSITORY_URL: 'https://gitlab.com/exploit-database/exploitdb.git',
  // Or
  CSV_URL: 'https://gitlab.com/exploit-database/exploitdb/-/raw/main/files_exploits.csv'
};

Usage

Download Data

The server will automatically download ExploitDB data according to the configuration. To disable the cloning feature, set CLONE_REPOSITORY to false:

npm run download -- --no-clone

Query Exploits

Use the following command to query information about exploits:

curl -X POST http://localhost:3000/context \
  -H "Content-Type: application/json" \
  -d '{"command":"exploit_search","query":"缓冲区溢出"}'

Configuration Options

The following are the available configuration options and their default values:

Data Source

This server uses data provided by Exploit Database, which is maintained by Offensive Security. The data can be downloaded via a CSV file or cloned from the ExploitDB GitLab repository.

📄 License

This project is licensed under the MIT License. See the LICENSE file for details.

👏 Acknowledgments

• Offensive Security for maintaining the Exploit Database.
• Model Context Protocol for enabling AI assistants to access external tools.

🤝 Contribution

Contributions are welcome! Please feel free to submit a Pull Request.

If you have any feature suggestions or find a bug, please open an issue on our GitHub repository or contact us directly at contact@cyreslab.ai.