Cyreslab.ai에 의해 개발 ExploitDB 기능에 대한 액세스를 제공하는 모델 Context Protocol 서버. 이 서버는 Claude와 같은 AI 조수가 보안 악용과 취약점에 대한 정보를 쿼리 할 수 있으며 사이버 보안 연구 및 위협 인텔리전스 기능을 포함합니다.

**GitHub 저장소 **: https://github.com/Cyreslab-AI/exploitdb-mcp-server 문의: [email protected]

특징

-Exploit Search: 키워드, CVE ID, 플랫폼 등의 악용 검색

• Exploit Details: 코드를 포함한 특정 악용에 대한 종합 정보를 얻을
• CVE 조회: 특정 CVE ID와 관련된 모든 악용 찾기
• **최근 폭발 **: 새로 추가된 악용을 추적
• Statistics: 플랫폼, 유형 및 년에 의한 악용 배포에 대한 통찰력
• ** 자동 업데이트 ** : 예정된 업데이트로 데이터베이스 업데이트 유지

설치

# 필수품

• Node.js (v16 이상)
• npm (v7 이상)

설치 단계

1. 저장소를 복제:

2. 의존성 설치:

3. 프로젝트 구축:

4. 서버 구성:

• .env] .env.example]를 기반으로 루트 디렉토리에 있는 파일 생성

ExploitDB MCP Server

A Model Context Protocol server that provides access to ExploitDB functionality, developed by Cyreslab.ai. This server enables AI assistants like Claude to query information about security exploits and vulnerabilities, enhancing cybersecurity research and threat intelligence capabilities.

GitHub Repository: https://github.com/Cyreslab-AI/exploitdb-mcp-server Contact: [email protected]

Features

• Exploit Search: Search for exploits by keywords, CVE IDs, platforms, and more
• Exploit Details: Get comprehensive information about specific exploits, including code
• CVE Lookup: Find all exploits related to specific CVE IDs
• Recent Exploits: Track newly added exploits
• Statistics: Get insights into exploit distribution by platform, type, and year
• Automatic Updates: Keep the database up-to-date with scheduled updates

Installation

Prerequisites

• Node.js (v16 or higher)
• npm (v7 or higher)

Installation Steps

1. Clone the repository:

   git clone https://github.com/Cyreslab-AI/exploitdb-mcp-server.git
   cd exploitdb-mcp-server
   

2. Install dependencies:

   npm install
   

3. Build the project:

   npm run build
   

4. Configure the server:

   • Create a .env file in the root directory based on .env.example
   • Adjust settings as needed (data directory, update frequency, etc.)

5. Initialize the database:

   npm run update-db
   

   Note: The initial database update may take several minutes as it processes ~47,000 exploits from the ExploitDB CSV file. The script handles missing or malformed data gracefully by using fallback values for required fields.

6. Run the server:

   node build/index.js
   

MCP Configuration

To use this server with Claude or other MCP-compatible assistants, add it to your MCP configuration:

{
  "mcpServers": {
    "mcp-exploitdb-server": {
      "command": "node",
      "args": ["/path/to/exploitdb-mcp-server/build/index.js"]
    }
  }
}

Available Tools

The ExploitDB MCP server provides 18 comprehensive tools for querying and analyzing exploit data:

Core Search Tools

1. search_exploits - General search with multiple filters
2. get_exploit - Get detailed information about a specific exploit
3. find_by_cve - Find exploits by CVE ID
4. get_recent_exploits - Get recently added exploits
5. get_statistics - Get database statistics

Advanced Search Tools

6. search_by_platform - Search exploits for a specific platform with filters
7. search_by_type - Search by exploit type (webapps, remote, local, dos, hardware, shellcode)
8. search_by_author - Find all exploits by a specific author
9. search_by_date_range - Find exploits within a date range