OO

operantlabs/operant-mcp

Developer tools

このページは AI により自動翻訳されています。技術的な詳細は原文をご確認ください。 原文を見る

26 stars 7 forks 品質 70 トレンド 11MIT

Turn your AI agent into a hacker by plugging in this MCP

概要

Security testing MCP server with 51 tools for penetration testing, network forensics, memory analysis, and vulnerability assessment. - sqli_where_bypass — Test OR-based WHERE clause bypass - sqli_login_bypass — Test login form SQL injection - sqli_union_extract — UNION-based data extraction - sqli_blind_boolean — Boolean-based blind SQLi - sqli_blind_time — Time-based blind SQLi - sqli_file_read — Read files via LOAD_FILE() - xss_reflected_test — Test reflected XSS with 10 payloads - xss_payload_generate — Generate context-aware XSS payloads - cmdi_test — Test OS command injection - cmdi_blind_detect — Blind command injection via sleep timing - path_traversal_test — Test directory traversal with encoding variants - ssrf_test — Test SSRF with localhost bypass variants - ssrf_cloud_metadata — Test cloud metadata access via SSRF - pcap_overview — Protocol hierarchy and endpoint stats - pcap_extract_credentials — Extract FTP/HTTP/SMTP credentials - pcap_dns_analysis — DNS query...

README

以下は原文 README の抜粋です。原文を見る。

operant-mcp

Security testing MCP server with 51 tools for penetration testing, network forensics, memory analysis, and vulnerability assessment.

Quick Start

npx operant-mcp

Or install globally:

npm install -g operant-mcp
operant-mcp

Usage with Claude Code

Add to your MCP config:

{
  "mcpServers": {
    "operant": {
      "command": "npx",
      "args": ["-y", "operant-mcp"]
    }
  }
}

Tools (51)

SQL Injection (6)

  • sqli_where_bypass — Test OR-based WHERE clause bypass
  • sqli_login_bypass — Test login form SQL injection
  • sqli_union_extract — UNION-based data extraction
  • sqli_blind_boolean — Boolean-based blind SQLi
  • sqli_blind_time — Time-based blind SQLi
  • sqli_file_read — Read files via LOAD_FILE()

XSS (2)

  • xss_reflected_test — Test reflected XSS with 10 payloads
  • xss_payload_generate — Generate context-aware XSS payloads

Command Injection (2)

  • cmdi_test — Test OS command injection
  • cmdi_blind_detect — Blind command injection via sleep timing

Path Traversal (1)

  • path_traversal_test — Test directory traversal with encoding variants

SSRF (2)

  • ssrf_test — Test SSRF with localhost bypass variants
  • ssrf_cloud_metadata — Test cloud metadata access via SSRF

PCAP/Network Forensics (8)

  • pcap_overview — Protocol hierarchy and endpoint stats
  • pcap_extract_credentials — Extract FTP/HTTP/SMTP credentials
  • pcap_dns_analysis — DNS query analysis
GitHub で README 全文を見る

インストール

npx -y operant-mcp
MCP 初心者?mcpskill.org のガイドから始めましょう →

設定

{ "mcpServers": { "operant": { "command": "npx", "args": ["-y", "operant-mcp"] } } }