Ramkansal/pentestmcp 是从 https://github.com/ramkansal/pentestmcp. 导入的 MCP 服务器候选
概览
Ramkansal/pentestmcp 是从 https://github.com/ramkansal/pentestmcp. 导入的 MCP 服务器候选
概述（AI 翻译）
pentestMCP 通过模型上下文协议（MCP）为大型语言模型（LLMs）与实用渗透测试工具之间提供了强大的桥梁。该项目作为一个 MCP 服务器，展示了由 20 多个标准安全评估工具组成的精心策划套件（Nmap、Nuclei、ZAP、SQLMap 等），作为可调用的“工具”。这使得 MCP 兼容客户端（如 Claude Desktop 或特定 VS Code 设置）中的 AI 代理能够利用这些工具进行自动化和交互式的安全分析任务。
目标是实现对复杂安全工作流程的自然语言控制，使渗透测试能力更易访问并集成到AI驱动的环境中。本工作灵感来源于Laurie Kirk的GhidraMCP。
目录
- 核心概念与架构
- 主要特征
- 先决条件
- 安装与设置
- 使用预构建的 Docker 镜像（推荐）
- 本地构建 Docker 镜像
- 客户端主机集成
- Claude桌面集成
- VS Code 副驾驶聊天集成
- 工具参考
- 安全考量
- 贡献
- 许可证
- 免责声明
- 致谢
视频演示
本页由 AI 翻译，技术细节请以原文为准。
README
以下为原文 README 节选，完整内容请查看原文。
pentestMCP: AI-Powered Penetration Testing via MCP
pentestMCP provides a powerful bridge between Large Language Models (LLMs) and practical penetration testing tools through the Model Context Protocol (MCP). This project functions as an MCP Server, exposing a curated suite of over 20 standard security assessment utilities (Nmap, Nuclei, ZAP, SQLMap, etc.) as callable ‘tools’. This allows AI agents within MCP-compatible clients (like Claude Desktop or specific VS Code setups) to leverage these utilities for automated and interactive security analysis tasks.
The goal is to enable natural language control over complex security workflows, making pentesting capabilities more accessible and integrated into AI-driven environments. This work is inspired by Laurie Kirk’s GhidraMCP.
Table of Contents
- Core Concepts & Architecture
- Key Features
- Prerequisites
- Installation & Setup
- Client Host Integration
- Tool Reference
- Security Considerations
- Contributing
- License
- Disclaimer
- Acknowledgements
Video Demo
https://github.com/user-attachments/assets/930c879a-5cb4-478a-b033-f30df0e770a6
Core Concepts & Architecture
pentestMCP strictly adheres to the MCP specification, functioning solely as an MCP Server. It does not embed or directly communicate with any specific LLM. The interaction flow is mediated by an MCP Client Host application:
安装
docker run --rm -i ramgameer/pentest-mcp:latest配置
{
"mcpServers": {
"pentestMCP": {
"command": "docker",
"args": [
"run",
"--rm",
"-i",
"ramgameer/pentest-mcp:latest"
]
}
}
}