Security Tools Suite

🚀 FFUF MCP Bridging Tool

FFUF MCP is a bridge that connects FFUF (a faster web fuzzing tool) with the Model Context Protocol (MCP) ecosystem.

🚀 Quick Start

FFUF MCP realizes the seamless integration of FFUF's powerful web fuzzing capabilities with MCP-compatible applications and AI-driven workflow systems. This bridging tool allows you to access FFUF features through a standardized protocol, making it easier to incorporate them into automated security testing pipelines or AI assistant functions.

✨ Features

• Fully expose FFUF functionality to MCP.
• Simple configuration and setup.
• Easy integration with other MCP-compatible tools and systems.
• Standardized input/output processing.

📦 Installation

Prerequisites

• Node.js (v16 or later).
• FFUF installed on the system.
• MCP SDK.

Setup

1. Clone this repository:

git clone https://github.com/cyproxio/mcp-for-security
cd ffuf-mcp

2. Install dependencies:

npm install

3. Build the project:

npm run build

💻 Usage Examples

Basic Configuration

Configure the FFUF MCP server in the MCP client configuration:

{
  "ffuf": {
    "command": "node",
    "args": [
      "/path/to/ffuf-mcp/build/index.js",
      "ffuf"
    ]
  }
}

Run FFUF Tests

After configuration, you can run FFUF tests using the do-ffuf tool through the MCP interface:

// Example of invoking FFUF through MCP
const result = await mcp.tools.invoke("do-ffuf", {
  url: "http://example.com/FUZZ",
  ffuf_args: ["-w", "/path/to/wordlist.txt"]
});

Available Options

FFUF MCP supports all standard FFUF parameters. Refer to the FFUF documentation for the full list of parameters.

Basic Usage

const result = await mcp.tools.invoke("do-ffuf", {
  url: "http://target-website.com/FUZZ",
  ffuf_args: [
    "-w", "/path/to/common-directories.txt",
    "-mc", "200,204,301,302,307,401,403"
  ]
});

📚 Documentation

FFUF MCP is designed to work seamlessly with AI assistants that support the Model Context Protocol, enabling natural language interactive security testing tasks.

Example conversation between an AI assistant and a user:

User: Fuzz test the hidden directories of http://example.com.
AI: I will use FFUF to perform a fuzz test on the hidden directories for you.

[The AI uses FFUF MCP to execute the test and returns the results]

FFUF found the following directories:
- /admin (Status: 301)
- /api (Status: 200)
- /backup (Status: 403)
...

Troubleshooting

When encountering issues:

1. Verify that FFUF is correctly installed and accessible.
2. Check that the path to the FFUF executable in the configuration is correct.
3. Ensure that the execution permissions are set correctly.
4. Check the server logs for detailed error information.

📄 License

• FFUF Project: https://github.com/ffuf/ffuf
• Model Context Protocol: https://github.com/modelcontextprotocol