“在日本神话中，天狗是凶猛的山灵——大师级的战略家、战士和武士训练者。在网络安全领域，它引导你完成狩猎的每一个阶段。”

从侦察到报告——AI辅助渗透测试在一个指令中实现。

---

Tengu 是一个 MCP 服务器，将 Claude 变成渗透测试的副驾驶。它协调了 80 个安全工具——从 Nmap 到 Metasploit——并内置安全控制、审计日志和专业报告。

• 它是什么？ 一个连接 Claude 与行业标准渗透测试工具的 MCP 服务器
• 为什么要用它？ 自动化侦察和扫描，同时保持人类控制漏洞利用
• 这是为谁准备的？ 渗透测试员、红队成员、安全学生和咨询公司

主要特色

• 80 个工具 — Nmap、Metasploit、SQLMap、Nuclei、Hydra、兼容 Burp 的 ZAP 等
• AI编排 — Claude根据先前发现决定下一个工具
• 安全第一 — 允许列表、速率限制、审计日志以及破坏性行为的人工参与
• Auto Reports — 关联发现并生成专业渗透测试报告（MD/HTML/PDF）

Tengu — Pentesting MCP Server

“In Japanese mythology, the Tengu is a fierce mountain spirit — master strategist, warrior, and trainer of samurai. In cybersecurity, it guides you through every phase of the hunt.”

From recon to report — AI-assisted pentesting in one command.

---

Tengu is an MCP server that turns Claude into a penetration testing copilot. It orchestrates 80 security tools — from Nmap to Metasploit — with built-in safety controls, audit logging, and professional reporting.

• What is it? An MCP server that connects Claude to industry-standard pentest tools
• Why use it? Automates recon and scanning while keeping the human in control of exploits
• Who is it for? Pentesters, red teamers, security students, and consulting firms

Key Features

• 80 Tools — Nmap, Metasploit, SQLMap, Nuclei, Hydra, Burp-compatible ZAP, and more
• AI-Orchestrated — Claude decides the next tool based on previous findings
• Safety First — Allowlist, rate limiting, audit logs, and human-in-the-loop for destructive actions
• Auto Reports — Correlate findings and generate professional pentest reports (MD/HTML/PDF)
• 35 Workflows — Pre-built prompts for full pentest, web app, AD, cloud, and more
• 20 Resources — Built-in OWASP Top 10, MITRE ATT&CK, PTES, and pentest checklists
• Stealth Layer — Optional Tor/SOCKS5 proxy routing, UA rotation, and timing jitter

---

MCP Server Mode (Copilot)

Use Claude as an interactive pentest copilot — you direct the engagement, Claude picks the right tools and chains them together automatically.

Quick Start

git clone https://github.com/rfunix/tengu.git && cd tengu
make docker-build
make docker-up

Connect Claude Code to the running server:

claude mcp add --transport sse tengu http://localhost:8000/sse

Then ask Claude: Do a full pentest on http://192.168.1.100