授权渗透测试工作流程的MCP服务器：Nmap/Gobuster编排、上下文聚合、AI辅助分流和报告。
概览
授权的渗透测试MCP服务器，面向AI辅助的安全操作员。它协调通用评估工具，规范参与上下文，并让人工渗透测试员掌控范围、方法论和报告。 一个由人工智能驱动的助手和渗透测试中间件 MCP-PenTest 处于 alpha 阶段，正在积极开发中。欢迎贡献者参与新工具集成、用户界面/用户体验、文档、测试和报告工作流程。请参阅 CONTRIBUTING.md 了解如何开始。 模型上下文提供者（MCP）是一个开源框架，连接了人工智能与渗透测试工具。MCP与多种渗透测试工具接口，实时解析并丰富其输出，严格遵循标准渗透测试流程。它引导人工渗透测试人员完成每个阶段——从侦察和扫描到利用、后用到报告——与既定方法保持一致。
概述（AI 翻译）
授权的 AI 辅助安全操作员的渗透测试 MCP 服务器。 它协调通用评估工具，规范参与情境，并且 保持人工渗透测试员对范围、方法论和报告的控制。
一个由人工智能驱动的助手和渗透测试中间件
一览
| 面积 | mcp-pentest 提供的内容 |
|---|---|
| MCP 表面 | 本地 stdio 服务器，向兼容的 AI 客户端开放渗透测试工具 |
| 工具 | Nmap、Gobuster及授权评估的可扩展集成 |
| 工作流程 | 侦察、扫描、利用支持、利用后笔记及报告 |
| 输出 | 规范化扫描事件、参与上下文、发现及可报告的笔记 |
| 安全 | 为合法测试设计，明确授权并由人工操作员控制 |
状态
MCP-PenTest 处于 Alpha 阶段，正在积极开发中。欢迎贡献者 用于新工具集成、用户界面/用户体验、文档、测试和报告 工作流程。请参阅 CONTRIBUTING.md 了解如何开始。
🔍 概述
本页由 AI 翻译，技术细节请以原文为准。
README
以下为原文 README 节选，完整内容请查看原文。
mcp-pentest
Authorized penetration-testing MCP server for AI-assisted security operators. It orchestrates common assessment tools, normalizes engagement context, and keeps the human pentester in control of scope, methodology, and reporting.
At a glance
| Area | What mcp-pentest provides |
|---|---|
| MCP surface | Local stdio server that exposes pentest tools to compatible AI clients |
| Tooling | Nmap, Gobuster, and extensible integrations for authorized assessments |
| Workflow | Reconnaissance, scanning, exploitation support, post-exploitation notes, and reporting |
| Output | Normalized scan events, engagement context, findings, and report-ready notes |
| Safety | Built for legal testing with explicit authorization and human operator control |
Status
mcp-pentest is in alpha and under active development. Contributors are welcome for new tool integrations, UI/UX, documentation, testing, and reporting workflows. See CONTRIBUTING.md for how to get started.
🔍 Overview
The Model Context Provider (MCP) is an open-source framework that bridges AI with penetration testing tools. MCP interfaces with a wide array of pentesting tools, parses and enriches their output in real-time, and strictly follows the standard penetration testing process. It guides human pentesters through each phase – from reconnaissance and scanning to exploitation, post-exploitation, and reporting – aligning with established methodologies.
⚠️ Disclaimer: This tool is intended for legal security testing with proper authorization. Misuse of this software for unauthorized access to systems is illegal and unethical.
✨ Key Features
- Methodology Enforcement: Ensures each engagement progresses through proper phases (reconnaissance → scanning → exploitation → post-exploitation → reporting) in order.
- Real-time Context Aggregation: Captures tool outputs, normalizes the data into a unified engagement context, and stores it for analysis.
- LLM-Powered Insights: Leverages a large language model to interpret findings and provide guidance during the engagement.
安装
This server does not publish a one-line install command.
Open the repository installation guide 新手？先看 mcpskill.org 教程 →配置
{
"mcpServers": {
"mcp-pentest": {
"command": "python",
"args": ["/path/to/mcp-pentest/server.py"],
"env": {}
}
}
}