r-s0n/rs0n-bug-bounty-mcp-server

21 stars 0 forks Качество 80 Тренд 80

An MCP (Model Context Protocol) server that gives Claude Code access to a comprehensive bug bounty hunting knowledge base.

Обзор

An MCP (Model Context Protocol) server that gives Claude Code access to a comprehensive bug bounty hunting knowledge base. Includes techniques, payloads, wordlists, real-world reports, and structured methodology. Add to your Claude Code MCP config (~/.claude/settings.json or project .claude/settings.json): The server uses (no port needed), so there are no port conflicts with other MCP servers. - - Payload lists and bypass techniques - - Comprehensive pentesting wiki - - Cloud security testing - - Wordlists for fuzzing, brute-forcing, and enumeration - - rs0n's battle-tested methodology - (accepted) with detailed writeups - - What NOT to submit

README

Bug Bounty MCP Server

Quick Start

# Install dependencies
npm install

# Clone knowledge base repos (PayloadsAllTheThings, HackTricks, HackTricks-Cloud, SecLists, DEFCON32 workshop)
npm run clone-repos

# Build
npm run build

# Run (stdio mode, default)
npm start

Add to Claude Code

Add to your Claude Code MCP config (~/.claude/settings.json or project .claude/settings.json):

{
  "mcpServers": {
    "bug-bounty-knowledge": {
      "command": "node",
      "args": ["/path/to/rs0n-bug-bounty-mcp-server/dist/index.js"]
    }
  }
}

The server uses stdio transport (no port needed), so there are no port conflicts with other MCP servers.

Tools (14)

Tool	Description
`search_techniques`	Full-text search across all knowledge sources
`get_payloads`	Payloads for 25 vulnerability categories
`get_methodology`	Testing methodology by target type
`get_rs0n_methodology`	rs0n’s DEFCON32 methodology (Recon/Injection/Logic/Cloud)
`get_bounty_reports`	Real-world accepted and rejected reports
`assess_report_quality`	Evaluate if a finding will be accepted
`get_cloud_security`	AWS/Azure/GCP/K8s attack techniques
`get_waf_bypass`	WAF bypass techniques by vuln type
`browse_knowledge_base`	Navigate the knowledge base
`read_knowledge_file`	Read specific KB files
`list_wordlists`	Browse SecLists categories
`get_wordlist`	Retrieve a specific wordlist
`search_wordlists`	Find wordlists by keyword
`get_recommended_wordlist`	Get the best wordlist for a task

Knowledge Base Sources

PayloadsAllTheThings - Payload lists and bypass techniques
HackTricks - Comprehensive pentesting wiki
HackTricks-Cloud - Cloud security testing
SecLists - Wordlists for fuzzing, brute-forcing, and enumeration
DEFCON32 Workshop - rs0n’s battle-tested methodology
778+ curated bug bounty reports (accepted) with detailed writeups
Rejected report patterns - What NOT to submit

Updating Knowledge Base

# Pull latest from all repos
npm run clone-repos

View this README on GitHub

Установка

This server does not publish a one-line install command.

Open the repository installation guide

Конфигурация

{
  "mcpServers": {
    "bug-bounty-knowledge": {
      "command": "node",
      "args": ["/path/to/rs0n-bug-bounty-mcp-server/dist/index.js"]
    }
  }
}