binderlabs/bughound-mcp

버추얼 MCP

MCP 기반 보안 자동화 프레임 워크

블랙 하프 아센 아시아 2026  |  45 기술  |  35 Vuln 클래스  |  3개의 형태

---

BugHound는 웹 애플리케이션 보안 reconnaissance 및 취약성 평가를위한 완벽한 파이프라인을 제공하는 모델 Context Protocol (MCP) 서버입니다. MCP 엔드포인트로 구조화 된 보안 도구를 노출하여 AI 클라이언트 (Claude, Gemini, Codex)를 활성화하여 대상 입력에서 7 단계의 파이프라인을 확인 취약성 보고서로 변환합니다. BugHound는 45 테스트 기법을 가진 배 – 29는 순수한 Python이고 주입, 접근 제한, 서버 측, 윤곽 및 자료 누설 취약점 종류를 커버하는 0개의 외부 공구를 요구합니다.

특징

• 7-Stage Pipeline – Init, Enumerate, Discover, Analyze, Test, Validate, Report – 단계는 대상 유형에 따라 붕괴
• ** 45 테스트 기술** – 모든 카테고리에 대한 순수 Python fallback; 시작해야 할 외부 도구 없음
• **3 실행 모드 ** – MCP Server (AI 클라이언트용), CLI (단말 워크플로우용), AI Agent (자치 스캔용)

BugHound MCP

MCP-Based Security Automation Framework

Black Hat Arsenal Asia 2026  |  45 Techniques  |  35 Vuln Classes  |  3 Modes

---

BugHound is a Model Context Protocol (MCP) server that provides a complete pipeline for web application security reconnaissance and vulnerability assessment. It exposes structured security tools as MCP endpoints, enabling AI clients (Claude, Gemini, Codex) to orchestrate a 7-stage pipeline from target input to verified vulnerability report. BugHound ships with 45 testing techniques – 29 of which are pure-Python and require zero external tools – covering injection, access control, server-side, configuration, and data leakage vulnerability classes.

Features

• 7-Stage Pipeline – Init, Enumerate, Discover, Analyze, Test, Validate, Report – stages collapse based on target type
• 45 Testing Techniques – pure-Python fallbacks for every category; no external tools required to start
• 3 Execution Modes – MCP Server (for AI clients), CLI (for terminal workflows), AI Agent (autonomous scanning)
• Professional HTML Reports – dark teal dashboard with filtering, export, and executive summary
• Auth-Aware Testing – JWT auto-propagation across all testing techniques
• Live Reflection Probes – real-time XSS reflection detection during discovery
• Attack Chain Detection – multi-step exploitation paths with composite scoring
• Scope Enforcement – mandatory scope validation before any active testing
• Adaptive Tool Coverage – gracefully adapts when external tools are unavailable

Quick Start

git clone https://github.com/binderlabs/BugHound-MCP.git
cd BugHound
pip install -r requirements.txt
./scripts/install-tools.sh  # Optional: install Go/external tools

# Mode 1: MCP Server
python -m bughound.server

# Mode 2: CLI
./bhound scan https://target.com
./bhound scan https://target.com -v
./bhound scan https://target.com --profile client   # quick wins only
./bhound recon https://target.com
./bhound list

# Mode 3: AI Agent
./bhound agent https://target.com --provider openrouter --api-key sk-or-...

Installation

Python Dependencies

pip install -r requirements.txt

Core dependencies: mcp, pydantic, aiohttp, aiofiles, structlog

Optional (for agent mode): anthropic, openai

External Security Tools (Optional)

BugHound works with zero external tools using 29 pure-Python techniques. For full coverage (43 techniques), install the following: