Secops MCP

🚀 Security Operations Multi-functional Platform (MCP)

A comprehensive security operations platform that integrates multiple security tools into a unified interface. This platform provides a centralized interface for running various security scanning and testing tools.

🚀 Quick Start

To start using the Security Operations Multi-functional Platform (MCP), follow the steps below:

1. Launch the application:

python main.py

2. The application will present a unified interface to run various security tools.
3. The results returned by each tool are in a consistent JSON format:

{
    "success": boolean,
    "error": string (if an error occurs),
    "results": object (if successful)
}

✨ Features

• Unified Interface: A single access point for multiple security tools.
• Docker Support: Easy deployment using Docker.
• JSON Output: A consistent JSON output format for all tools.
• Error Handling: Powerful error handling and reporting capabilities.
• Scalability: Easy to add new tools and features.

📦 Installation

Using Docker (Recommended)

1. Clone the repository:

git clone https://github.com/yourusername/secops-mcp.git
cd secops-mcp

2. Build the Docker image:

docker build -t secops-mcp .

3. Run the container:

docker run -it --rm secops-mcp

Manual Installation

1. Clone the repository:

git clone https://github.com/yourusername/secops-mcp.git
cd secops-mcp

2. Create and activate a virtual environment:

python -m venv venv
source venv/bin/activate  # On Windows: venv\Scripts\activate

3. Install the dependencies:

pip install -r requirements.txt

4. Install the required tools:

• Follow the installation instructions for each tool in the tools/ directory.
• Ensure that all tools are available in the system PATH.

💻 Usage Examples

Basic Usage

python main.py

This command starts the application, and you can use the unified interface to run various security tools.

Advanced Usage

Each tool can be configured through its corresponding wrapper in the tools/ directory. Configuration options include:

• Output format
• Timeout settings
• Verbosity level
• Custom dictionaries
• Tool-specific parameters

📚 Documentation

Included Tools

• Nuclei: A fast and customizable vulnerability scanner.
• FFUF: A fast web crawler and content discovery tool.
• Amass: A tool for in-depth attack surface mapping and external asset discovery.
• Dirsearch: A web path scanning tool.
• Hashcat: An advanced password recovery tool.
• HTTPX: A fast and multi-functional HTTP toolkit.
• IPInfo: A tool for collecting IP address information.
• Nmap: A network exploration and security auditing tool.
• SQLMap: An automated SQL injection and database takeover tool.
• Subfinder: A subdomain discovery tool.
• TLSX: A TLS/SSL scanning and analysis tool.
• WFuzz: A web application fuzzing tool.
• XSStrike: An advanced XSS detection and exploitation tool.

Tool Configuration

Each tool can be configured through its corresponding wrapper in the tools/ directory. Configuration options include output format, timeout settings, verbosity level, custom dictionaries, and tool-specific parameters.

Security Precautions

• This tool is only for authorized security testing.
• Always obtain proper authorization before scanning a system.
• Be aware of rate limits and scanning intensity.
• Comply with robots.txt and terms of service.
• Use appropriate dictionaries and scanning parameters.

Contribution Guidelines

1. Fork the repository.
2. Create a feature branch.
3. Commit your changes.
4. Push to the branch.
5. Create a Pull Request.

📄 License

This software is licensed under the [MIT License].

Additional Information

For more information, please visit the project homepage or refer to the relevant documentation.