binderlabs/bughound-mcp

臭虫猎犬MCP

基于MCP的安全自动化框架

Black Hat Arsenal Asia 2026 & nbsp; \ nbsp; 黑帽亚细亚 2026 & nbsp; 45 技术 & nbsp;\ nbsp; 35 Vuln 类 & nbsp; |  3 个模式

– – . . .

BugHound是一个模型上下文协议(MCP)服务器,为网络应用安全侦察和脆弱性评估提供了完整的管道. 它将结构化的安全工具暴露为MCP的端点,使得AI客户端(克洛德,双子座,Codex)能够从目标输入到核实的脆弱性报告来协调一个7个阶段的管道. 拥有45个测试技术的BugHond船 – – 其中29个为纯Python并需要零外部工具 – – 涵盖注射、访问控制、服务器侧、配置和数据泄漏脆弱性类别。

□ 特性

• 7-Stage管道 – – 根据目标类型分级倒塌、假设、发现、分析、测试、验证、报告
• 45 测试技术 – – 每类纯蟒蛇倒置;没有启动所需的外部工具
• 3 执行模式 – – MCP服务器(用于AI客户端)、CLI(用于终端工作流程)、AI代理(自动扫描)

BugHound MCP

MCP-Based Security Automation Framework

Black Hat Arsenal Asia 2026  |  45 Techniques  |  35 Vuln Classes  |  3 Modes

---

BugHound is a Model Context Protocol (MCP) server that provides a complete pipeline for web application security reconnaissance and vulnerability assessment. It exposes structured security tools as MCP endpoints, enabling AI clients (Claude, Gemini, Codex) to orchestrate a 7-stage pipeline from target input to verified vulnerability report. BugHound ships with 45 testing techniques – 29 of which are pure-Python and require zero external tools – covering injection, access control, server-side, configuration, and data leakage vulnerability classes.

Features

• 7-Stage Pipeline – Init, Enumerate, Discover, Analyze, Test, Validate, Report – stages collapse based on target type
• 45 Testing Techniques – pure-Python fallbacks for every category; no external tools required to start
• 3 Execution Modes – MCP Server (for AI clients), CLI (for terminal workflows), AI Agent (autonomous scanning)
• Professional HTML Reports – dark teal dashboard with filtering, export, and executive summary
• Auth-Aware Testing – JWT auto-propagation across all testing techniques
• Live Reflection Probes – real-time XSS reflection detection during discovery
• Attack Chain Detection – multi-step exploitation paths with composite scoring
• Scope Enforcement – mandatory scope validation before any active testing
• Adaptive Tool Coverage – gracefully adapts when external tools are unavailable

Quick Start

git clone https://github.com/binderlabs/BugHound-MCP.git
cd BugHound
pip install -r requirements.txt
./scripts/install-tools.sh  # Optional: install Go/external tools

# Mode 1: MCP Server
python -m bughound.server

# Mode 2: CLI
./bhound scan https://target.com
./bhound scan https://target.com -v
./bhound scan https://target.com --profile client   # quick wins only
./bhound recon https://target.com
./bhound list

# Mode 3: AI Agent
./bhound agent https://target.com --provider openrouter --api-key sk-or-...

Installation

Python Dependencies

pip install -r requirements.txt

Core dependencies: mcp, pydantic, aiohttp, aiofiles, structlog

Optional (for agent mode): anthropic, openai

External Security Tools (Optional)

BugHound works with zero external tools using 29 pure-Python techniques. For full coverage (43 techniques), install the following: