MCP Server Pentest

@MCP-Mirror

リポジトリ

基本情報

カテゴリ

その他

ライセンス

MIT license

トランスポート

stdio

作者

MCP-Mirror

MCP Server Pentest について

Mirror of

#9olidity#pentest #security-testing

MCP Server Pentest の設定

以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。

{
  "mcpServers": {
    "9olidity_MCP-Server-Pentest": {
      "url": "https://test.com",
      "paramName": "text"
    }
  }
}

MCP Server Pentest のツール

ツール一覧はまだありません

この掲載には表示できるツール一覧がまだありません。サーバーにツールがないという意味ではありません。対応機能はプロジェクトのドキュメントをご確認ください。

上のボタンでサーバーのエンドポイントに接続し、ツール一覧を取得できます。

概要

What is MCP Server Pentest?

MCP Server Pentest is a server that integrates browser automation with security testing, enabling automated detection of XSS and SQL injection vulnerabilities in URLs. It also provides full browser control for navigation, screenshots, click interactions, and JavaScript execution, targeting developers and security testers who need to automate web security checks.

How to use MCP Server Pentest?

Install by running npx playwright install firefox, yarn install, and npm run build. Then add the provided JSON configuration block to your Claude config file, pointing to the built dist/index.js. Use the exposed tools (e.g., broser_url_reflected_xss, browser_url_sql_injection) by passing a URL and parameter name as arguments.

Key features of MCP Server Pentest

Automatic XSS vulnerability detection in URLs
Automatic SQL injection vulnerability detection in URLs
Full-page or element-specific screenshot capture
Browser navigation, clicking, form filling, and text selection
Console log monitoring and JavaScript execution in browser context

Use cases of MCP Server Pentest

Automatically test a web application’s URL parameters for reflected XSS
Scan form inputs or query strings for SQL injection flaws
Take screenshots of vulnerable pages for reporting
Fill and submit forms to test login or search endpoints
Execute custom JavaScript to extract runtime page data

よくある質問

What runtime dependencies are required?

The server requires Node.js, the Playwright package, and a Firefox browser (installed via `npx playwright install firefox`). It runs as a command-line MCP server.

Which browsers are supported?

Firefox is explicitly installed and used; the README does not mention Chrome or other browsers.

Can it interact with dynamic content?

Yes – tools for clicking, hovering, filling inputs, and selecting dropdown options are available, along with JavaScript evaluation in the browser context.

Where are screenshots saved?

The README does not specify a default save location; screenshots are likely stored in the working directory or must be explicitly named via the `name` parameter in `browser_screenshot`.

「その他」の他のコンテンツ

Glasswarp

See and control a real Windows PC you own — from any MCP client, locally or remotely. Observe (UIA + screenshots), click/type/drag/scroll, launch apps, owner Live View. BYOH: your machine, your key.

The Living Bread

A free remote MCP server for The Living Bread. Bible passages read word for word from a stored public domain text with an evidence label, keyword search and cross references, real churches, gatherings and prayer groups w