Use FuzzingLabs MCP Security Hub to integrate offensive security tools (Nmap, Nuclei, SQLMap, Ghidra, etc.) with AI assistants via Docker-based MCP servers
Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.
Une commande directe contourne le prompt de vérification. Examinez la source avant de l'exécuter.
Use FuzzingLabs MCP Security Hub to integrate offensive security tools (Nmap, Nuclei, SQLMap, Ghidra, etc.) with AI assistants via Docker-based MCP servers
triggers
["scan a network for vulnerabilities","analyze this binary with radare2","check for SQL injection vulnerabilities","find secrets in this git repository","fingerprint web technologies on this domain","perform security reconnaissance","audit cloud infrastructure for misconfigurations","fuzz this network protocol"]
MCP Security Hub is a collection of 38 production-ready, Dockerized MCP (Model Context Protocol) servers that bring offensive security tools to AI assistants. It enables Claude and other MCP clients to perform security assessments, vulnerability scanning, binary analysis, and penetration testing through natural language interactions.
Key capabilities:
300+ security tools across 13 categories (reconnaissance, web security, binary analysis, blockchain, cloud, OSINT, etc.)
Docker-based architecture with security hardening (non-root, capability dropping, read-only mounts)
Natural language interface to complex security tools
Multi-tool orchestration via Docker Compose
CI/CD-ready with automated builds and Trivy scanning
Installation
Prerequisites
Docker and Docker Compose installed
Claude Desktop or another MCP client
Git for cloning the repository
Setup Steps
Clone the repository:
git clone https://github.com/FuzzingLabs/mcp-security-hub
cd mcp-security-hub
Restart Claude Desktop to load the new MCP servers.
Key MCP Servers by Category
Reconnaissance
nmap-mcp - Port scanning and service detection:
# Start the server
docker-compose up nmap-mcp -d
# Example prompts:# "Scan 192.168.1.0/24 for open ports"# "Perform service detection on 10.0.0.5"# "Run aggressive scan with OS detection on example.com"
whatweb-mcp - Web technology fingerprinting:
docker-compose up whatweb-mcp -d
# Example prompts:# "Identify technologies used on example.com"# "Fingerprint the CMS on this website"
masscan-mcp - High-speed port scanning:
docker-compose up masscan-mcp -d
# Example prompts:# "Fast scan ports 1-65535 on 10.0.0.0/16"# "Scan for web servers across this entire subnet"
docker-compose up nuclei-mcp -d
# Example prompts:# "Scan example.com for CVEs and misconfigurations"# "Check this site for exposed sensitive files"# "Run nuclei templates for authentication bypass"
sqlmap-mcp - SQL injection testing:
docker-compose up sqlmap-mcp -d
# Example prompts:# "Test https://example.com/page?id=1 for SQL injection"# "Check if this login form is vulnerable to SQLi"# "Enumerate databases on this vulnerable endpoint"
ffuf-mcp - Web fuzzing:
docker-compose up ffuf-mcp -d
# Example prompts:# "Fuzz directories on example.com"# "Find hidden API endpoints on this application"# "Brute force parameter names for this URL"
docker run -i --rm -v /path/to/binaries:/samples:ro radare2-mcp:latest
# Example prompts:# "Disassemble /samples/malware.exe and find main function"# "Analyze this binary for suspicious strings"# "Decompile the authentication routine"
binwalk-mcp - Firmware analysis:
docker-compose up binwalk-mcp -d
# Example prompts:# "Extract filesystem from this firmware image"# "Scan for embedded files in this binary"# "Analyze this router firmware for security issues"
yara-mcp - Malware pattern matching:
docker-compose up yara-mcp -d
# Example prompts:# "Scan this file for malware signatures"# "Check if this binary matches ransomware patterns"
Secrets Detection
gitleaks-mcp - Find credentials in repos:
docker run -i --rm -v /path/to/repo:/app/target:ro gitleaks-mcp:latest
# Example prompts:# "Scan this repository for hardcoded secrets"# "Find API keys in the commit history"# "Check for AWS credentials in the codebase"
Cloud Security
trivy-mcp - Container and IaC scanning:
docker-compose up trivy-mcp -d
# Example prompts:# "Scan this Docker image for vulnerabilities"# "Audit my Terraform files for misconfigurations"# "Check this Kubernetes manifest for security issues"
prowler-mcp - Cloud security auditing:
docker-compose up prowler-mcp -d
# Example prompts:# "Audit my AWS account for security best practices"# "Check Azure for compliance violations"# "Scan GCP project for misconfigurations"
# Reconnaissance stack
docker-compose up nmap-mcp whatweb-mcp masscan-mcp -d
# Web security stack
docker-compose up nuclei-mcp sqlmap-mcp ffuf-mcp -d
# Full suite
docker-compose up -d
# Check status
docker-compose ps
# View logs
docker-compose logs -f nmap-mcp
# Stop services
docker-compose down
Common Usage Patterns
Network Reconnaissance Workflow
# 1. Build required images
docker-compose build nmap-mcp whatweb-mcp
# 2. Start services
docker-compose up nmap-mcp whatweb-mcp -d
# 3. In Claude Desktop, use natural language:# "Scan 192.168.1.0/24 for web servers, then fingerprint their technologies"
Claude will orchestrate:
nmap-mcp scans for ports 80, 443, 8080
whatweb-mcp fingerprints each discovered host
Consolidates results into a security assessment
Web Application Assessment
# Build and start
docker-compose build nuclei-mcp sqlmap-mcp ffuf-mcp
docker-compose up nuclei-mcp sqlmap-mcp ffuf-mcp -d
# Prompt:# "Assess example.com for vulnerabilities: scan for CVEs, test for SQL injection, and fuzz directories"
Binary Analysis Pipeline
# Mount your binaries directory
docker run -i --rm -v /path/to/samples:/samples:ro radare2-mcp:latest &
docker-compose up binwalk-mcp yara-mcp capa-mcp -d
# Prompt:# "Analyze /samples/suspicious.exe: extract strings, identify capabilities, and scan for malware"
Secrets Scanning in CI/CD
# Scan repository
docker run -i --rm \
-v $(pwd):/app/target:ro \
gitleaks-mcp:latest
# In automation:# "Scan the current repository for hardcoded secrets and API keys"
Configuration Examples
Volume Mounts for File Analysis
For servers that need to access files (radare2, binwalk, gitleaks):
# Navigate to server directorycd reconnaissance/nmap-mcp
# Build with Docker
docker build -t nmap-mcp:latest .
# Run directly
docker run -i --rm --cap-add=NET_RAW nmap-mcp:latest
# Or use docker-compose from rootcd ../..
docker-compose build nmap-mcp
docker-compose run --rm nmap-mcp
Security Hardening Features
All containers implement:
Non-root execution: Runs as mcpuser (UID 1000)
Capability dropping: cap_drop: ALL with selective adds
Read-only mounts: Sample directories are :ro
No new privileges: security_opt: no-new-privileges:true
Resource limits: CPU and memory constraints in docker-compose
Minimal base images: Alpine/Debian slim
Health checks: Built-in container monitoring
Vulnerability scanning: Trivy scans in CI/CD
Example Dockerfile pattern:
FROM python:3.11-alpine
# Create non-root user
RUN addgroup -g 1000 mcpuser && \
adduser -D -u 1000 -G mcpuser mcpuser
# Install tool
RUN apk add --no-cache nmap nmap-scripts
# Switch to non-root
USER mcpuser
WORKDIR /app
# Copy MCP server
COPY --chown=mcpuser:mcpuser server.py .
CMD ["python", "server.py"]
User: "Perform a full security assessment of example.com"
Claude orchestrates:
1. nmap-mcp: Port scan and service detection
2. whatweb-mcp: Technology fingerprinting
3. nuclei-mcp: CVE and misconfiguration scanning
4. sqlmap-mcp: SQL injection testing on discovered forms
5. ffuf-mcp: Directory and file fuzzing
6. gitleaks-mcp: Check if .git directory exposed and scan for secrets
Results consolidated into comprehensive report.
This skill enables AI coding agents to guide developers in deploying and using the MCP Security Hub for offensive security testing through natural language interactions with Claude and other MCP clients.
