一款模型上下文协议服务器，提供访问 ExploitDB 功能的访问，由 Cyreslab.ai 开发。该服务器使 AI 助手如 Claude 能够查询安全漏洞和漏洞信息，增强网络安全研究和威胁情报能力。

GitHub仓库： https://github.com/Cyreslab-AI/exploitdb-mcp-server 联系方式：[email protected]

特色

• 漏洞搜索：通过关键词、CVE ID、平台等搜索漏洞
• 漏洞利用详情：获取关于具体漏洞的全面信息，包括代码
• CVE 查询：查找所有与特定 CVE ID 相关的漏洞利用
• 近期漏洞：追踪新添加漏洞
• 统计数据：按平台、类型和年份获取漏洞分布的洞察
• 自动更新：通过计划更新保持数据库最新

安装

先决条件

• Node.js（v16或更高）
• NPM（V7或更高）

安装步骤

1. 克隆仓库：

2. 安装依赖：

3. 建设项目：

4. 配置服务器：

• 在根目录中基于.env.example创建.env文件。

ExploitDB MCP Server

A Model Context Protocol server that provides access to ExploitDB functionality, developed by Cyreslab.ai. This server enables AI assistants like Claude to query information about security exploits and vulnerabilities, enhancing cybersecurity research and threat intelligence capabilities.

GitHub Repository: https://github.com/Cyreslab-AI/exploitdb-mcp-server Contact: [email protected]

Features

• Exploit Search: Search for exploits by keywords, CVE IDs, platforms, and more
• Exploit Details: Get comprehensive information about specific exploits, including code
• CVE Lookup: Find all exploits related to specific CVE IDs
• Recent Exploits: Track newly added exploits
• Statistics: Get insights into exploit distribution by platform, type, and year
• Automatic Updates: Keep the database up-to-date with scheduled updates

Installation

Prerequisites

• Node.js (v16 or higher)
• npm (v7 or higher)

Installation Steps

1. Clone the repository:

   git clone https://github.com/Cyreslab-AI/exploitdb-mcp-server.git
   cd exploitdb-mcp-server
   

2. Install dependencies:

   npm install
   

3. Build the project:

   npm run build
   

4. Configure the server:

   • Create a .env file in the root directory based on .env.example
   • Adjust settings as needed (data directory, update frequency, etc.)

5. Initialize the database:

   npm run update-db
   

   Note: The initial database update may take several minutes as it processes ~47,000 exploits from the ExploitDB CSV file. The script handles missing or malformed data gracefully by using fallback values for required fields.

6. Run the server:

   node build/index.js
   

MCP Configuration

To use this server with Claude or other MCP-compatible assistants, add it to your MCP configuration:

{
  "mcpServers": {
    "mcp-exploitdb-server": {
      "command": "node",
      "args": ["/path/to/exploitdb-mcp-server/build/index.js"]
    }
  }
}

Available Tools

The ExploitDB MCP server provides 18 comprehensive tools for querying and analyzing exploit data:

Core Search Tools

1. search_exploits - General search with multiple filters
2. get_exploit - Get detailed information about a specific exploit
3. find_by_cve - Find exploits by CVE ID
4. get_recent_exploits - Get recently added exploits
5. get_statistics - Get database statistics

Advanced Search Tools

6. search_by_platform - Search exploits for a specific platform with filters
7. search_by_type - Search by exploit type (webapps, remote, local, dos, hardware, shellcode)
8. search_by_author - Find all exploits by a specific author
9. search_by_date_range - Find exploits within a date range