Externalattacker MCP

🚀 External Attacker MCP Server

ExternalAttacker is a powerful integrated tool that combines automated scanning capabilities with a natural language interface for comprehensive external attack surface management and reconnaissance.

🔍 Automate external attack surface management with AI!
Scan domains, analyze infrastructure, and discover vulnerabilities using simple English commands.

🌏 What is ExternalAttacker?

ExternalAttacker integrates the following features:

• Automated Scanning: A comprehensive set of external reconnaissance tools.
• Model Context Protocol (MCP): An open protocol for creating custom AI tools.
• Natural Language Processing: Transforms simple English queries into scanning commands.

📱 Community

Join our Telegram channel for updates, tips, and discussions:

• Telegram: https://t.me/root_sec

✨ Features

• Natural Language Interface: Run scans using simple English.
• Comprehensive Scan Categories:
  • 🌐 Subdomain discovery (subfinder)
  • 🔢 Port scanning (naabu)
  • 🌍 HTTP analysis (httpx)
  • 🛡️ CDN detection (cdncheck)
  • 🔐 TLS analysis (tlsx)
  • 📁 Directory brute-forcing (ffuf, gobuster)
  • 📝 DNS enumeration (dnsx)

📋 Prerequisites

• Python 3.8 or higher.
• Go programming language (for tool installation).
• MCP client.

📦 Installation

1. Clone this repository:

   git clone https://github.com/mordavid/ExternalAttacker-MCP.git
   cd ExternalAttacker
   

2. Install Python dependencies:

   pip install -r requirements.txt
   

3. Install required Go tools:

   go install -v github.com/projectdiscovery/subfinder/v2/cmd/subfinder@latest
   go install -v github.com/projectdiscovery/naabu/v2/cmd/naabu@latest
   go install -v github.com/projectdiscovery/httpx/cmd/httpx@latest
   go install -v github.com/projectdiscovery/cdncheck/cmd/cdncheck@latest
   go install -v github.com/projectdiscovery/tlsx/cmd/tlsx@latest
   go install -v github.com/ffuf/ffuf@latest
   go install github.com/OJ/gobuster/v3@latest
   go install -v github.com/projectdiscovery/dnsx/cmd/dnsx@latest
   

4. Run ExternalAttacker-App.py:

   python ExternalAttacker-App.py
   # Visit http://localhost:6991
   

5. Configure the MCP server:

   "mcpServers": {
       "ExternalAttacker-MCP": {
           "command": "python",
           "args": [
               "<Your_Path>\\ExternalAttacker-MCP.py"
           ]
       }
   }
   

💻 Usage Examples

Basic Usage

Here are some example queries:

• "Scan subdomains of example.com"
• "Check open ports on 192.168.1.1"
• "Analyze the HTTP service of test.com"
• "Check if domain.com uses a CDN"
• "Analyze the SSL configuration of site.com"
• "Brute-force endpoints on target.com"

📄 License

This project is licensed under the MIT License.

🙏 Acknowledgments

Thanks to the ProjectDiscovery team and the MCP community for their contributions.