pentest-mcp-server

Stats

Actions

Available In

@cyanheads/pentest-mcp-server

Offline methodology engine and payload workshop for authorized penetration testing, CTF, security research, and education via MCP. STDIO or Streamable HTTP.

7 Tools

Public Hosted Server: https://pentest.caseyjhand.com/mcp

Authorized use only. This server is designed for penetration testers, red teamers, CTF players, security researchers, and students working on systems they own or have explicit written authorization to test. Users are solely responsible for ensuring their testing is lawful and appropriately scoped. Unauthorized access to computer systems is illegal — this server does not and cannot enforce authorization on your behalf.

Dual-audience design. Every offensive technique is paired with detection indicators and mitigations. Blue teamers, developers, and anyone building detection coverage will find the methodology and ATT&CK data as useful as the red team workflows.

Tools

Seven tools spanning the full authorized-testing workflow — from initial scoping through response analysis and payload generation:

Tool	Description
`pentest_guide`	Returns a step-by-step methodology playbook for the given attack vector, scoped to authorized testing. Each phase covers what to look for, tools, detection indicators for defenders, and mitigations.
`pentest_analyze_response`	Analyzes a raw server response (headers + body) from authorized probing for information leakage, fingerprinting signals, and exploitation opportunities — each finding paired with remediation.
`pentest_lookup_technique`	Looks up a MITRE ATT&CK technique by ID or keyword. Returns description, tactics, detection data sources, behavioral indicators, mitigations, and real-world procedure examples.
`pentest_lookup_group`	Looks up a MITRE ATT&CK threat group or software entry by ID or name. Returns aliases, type (group vs. software), description, and the techniques it uses with procedure context.
`pentest_map_techniques`	Given a target profile (stack, services, auth type, OS), returns ranked ATT&CK techniques and OWASP test cases most relevant to that authorized engagement.
`pentest_generate_payloads`	Generates annotated payload templates for authorized testing. Each template includes why it works in the injection context, detection signatures, and mitigations.
`pentest_encode`	Applies an encoding chain to a payload string (URL, double-URL, HTML entity, Unicode, hex, Base64, and more). Returns step-by-step decode explanation and bypass rationale.

`pentest_guide`

Instruction tool. Returns a structured attack methodology playbook for the given vector and optional target context.

Popularity

What's Inside

Confidence

README

@cyanheads/pentest-mcp-server

Tools

`pentest_guide`

Similar Plugins

fullstack-dev-skills

dotnet-skills

ecc

supergraph

More by cyanheads

obsidian-mcp-server

pubmed-mcp-server

clinicaltrialsgov-mcp-server

workflows-mcp-server

toolkit-mcp-server

@cyanheads/pentest-mcp-server

Tools

`pentest_guide`

Popularity

Health & Quality

More by cyanheads

obsidian-mcp-server

pubmed-mcp-server

clinicaltrialsgov-mcp-server

workflows-mcp-server

toolkit-mcp-server

Similar Plugins

fullstack-dev-skills

dotnet-skills

ecc

supergraph