MCP.so
Sign In

ExternalAttacker MCP Server

@MorDavid

Basic information

Category

Other

Transports

stdio

Author

MorDavid

Submitted by

Mor David

About ExternalAttacker MCP Server

A modular external attack surface mapping tool integrating tools for automated reconnaissance and bug bounty workflows.

#mcp#bug-bounty#nuclei#bugbounty#gobuster#httpx#bugbounty-tool#nuclei-templates#projectdiscovery#dnsx#tlsx#mcp-server#externalattacker

ExternalAttacker MCP Server config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "ExternalAttacker-MCP": {
      "command": "python",
      "args": [
        "<Your_Path>\\ExternalAttacker-MCP.py"
      ]
    }
  }
}

ExternalAttacker MCP Server tools

Tool list not available yet

This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is ExternalAttacker MCP Server?

ExternalAttacker MCP Server is a model context protocol integration that brings automated external attack surface management and reconnaissance capabilities through a natural language interface. It allows users to run scans, analyze infrastructure, and discover vulnerabilities by issuing plain-English queries to an AI assistant.

How to use ExternalAttacker MCP Server?

Clone the repository, install the Python dependencies, install the required Go tools (subfinder, naabu, httpx, cdncheck, tlsx, ffuf, gobuster, dnsx), then run ExternalAttacker-App.py and access the local web interface (default port 6991). Finally, configure the MCP server in your MCP client by adding the command python <path>/ExternalAttacker-MCP.py to the mcpServers section.

Key features of ExternalAttacker MCP Server

  • Natural language interface for scanning commands
  • Subdomain discovery (using subfinder)
  • Port scanning (using naabu)
  • HTTP service analysis (using httpx)
  • CDN detection (using cdncheck)
  • TLS/SSL analysis (using tlsx)
  • Directory fuzzing (using ffuf, gobuster)
  • DNS enumeration (using dnsx)

Use cases of ExternalAttacker MCP Server

  • Scan a domain for subdomains and map its attack surface
  • Check open ports on a target IP or hostname
  • Analyze HTTP response headers and status codes for a site
  • Verify whether a domain is behind a CDN
  • Fuzz common endpoints and directories on a web application

Frequently asked questions

1

What are the prerequisites?

Python 3.8 or higher, Go installed, and a MCP client are required.

2

How do I install the required Go tools?

Run the provided `go install` commands for each tool (subfinder, naabu, httpx, cdncheck, tlsx, ffuf, gobuster, dnsx).

3

What kind of queries can I make?

You can ask questions like “Scan example.com for subdomains”, “Check open ports on 192.168.1.1”, or “Analyze HTTP services on test.com”.

4

How do I configure the MCP server in my client?

Add an entry to your MCP client’s `mcpServers` configuration with the command `python` and args containing the full path to `ExternalAttacker-MCP.py`.

5

Is this tool safe to use?

It is a security tool; you should only use it on systems you have explicit permission to test.

Comments

More Other MCP servers