Instalar com Codex ou Claude Copie este prompt, cole no Codex, Claude ou outro assistente e deixe que ele revise a página da skill e instale para você.
Um comando direto ignora o prompt de revisão. Verifique a origem antes de executá-lo.
Instruções da origem · Visualização somente leitura
name
pentester-mcp-security-tools
description
MCP server integrating 200+ penetration testing tools (nmap, sqlmap, ffuf, etc.) via Docker sandbox for AI-driven security testing
triggers
["run a penetration test with AI","scan a target with nmap through MCP","use pentester MCP tools for security testing","execute sqlmap or ffuf via Model Context Protocol","set up AI-powered penetration testing environment","configure pentester-mcp in Claude or Cursor","integrate cybersecurity tools with AI assistant","automate security scans using MCP server"]
Pentester-MCP provides Model Context Protocol (MCP) integration for 200+ open-source penetration testing and cybersecurity tools. It enables AI assistants (Claude Desktop, Cursor, etc.) to autonomously execute security tools like nmap, sqlmap, ffuf, gobuster, nuclei, impacket, and hundreds more within a secure Docker sandbox.
Each tool is wrapped as an MCP server with AI-optimized documentation, safe argument handling, timeout enforcement, and output truncation to prevent shell injection and system pollution.
Installation
Docker Sandbox (Recommended)
The Docker approach isolates all 200+ tools in a container, avoiding host system pollution:
# Clone repository
git clone https://github.com/halilkirazkaya/pentester-mcp.git
cd pentester-mcp
# Configure desired tools in configs/example-config.yaml
docker compose up -d --build
docker ps | grep pentester-mcp
# Set tools to true/false based on your needs
# Build and start container
# Verify container is running
Local Execution (Advanced)
For Kali Linux, Parrot OS, or systems with tools pre-installed:
Never hardcode secrets. Use environment variables:
# Set credentials in container
docker exec pentester-mcp sh -c 'export TARGET_USER=$TARGET_USER'# Reference in AI queries# "Use credentials from $TARGET_USER and $TARGET_PASS environment variables"
Custom Tool Configurations
Create custom config files for specific engagements:
# configs/web-pentest.yamlnmap:trueffuf:truegobuster:truesqlmap:truenikto:truenuclei:true# Disable AD toolsimpacket:falsebloodhound:falseresponder:false
All tools truncate output to 8000 characters to prevent context overflow. For full output:
# Execute directly in container for full output
docker exec -it pentester-mcp nmap -p- target.com > full_output.txt
Permission Denied (Local Execution)
When running locally, some tools require root:
# Run with sudosudo /path/to/.venv/bin/python server.py
# Or add user to sudoers for specific toolsecho"$USER ALL=(ALL) NOPASSWD: /usr/bin/nmap" | sudotee /etc/sudoers.d/pentester
Legal & Ethical Use
CRITICAL: Only use these tools on systems you own or have explicit written authorization to test. Unauthorized penetration testing is illegal. This project is for:
Authorized security assessments
Bug bounty programs with scope
Educational lab environments
Your own infrastructure testing
Always obtain proper authorization before running any security tools.
