广告合作
MCP.so
登录

MCP Server Pentest

@9olidity

代码仓库

基本信息

分类

其他

许可证

MIT

传输方式

stdio

作者

9olidity

关于 MCP Server Pentest

暂无概览

#playwright#browser-automation#web-testing

MCP Server Pentest 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "playwright": {
      "command": "npx",
      "args": [
        "-y",
        "/Users/...../dist/index.js"
      ],
      "disabled": false,
      "autoApprove": []
    }
  }
}

MCP Server Pentest 工具

工具列表暂未提供

当前收录暂时没有可展示的工具列表，不代表服务没有工具。请查阅项目文档了解支持的能力。

点击上方按钮,在临时沙箱中运行此服务器并实时获取工具列表。

概览

What is MCP Server Pentest?

MCP Server Pentest is an MCP server that automates browser-based security vulnerability detection (XSS and SQL injection) and provides comprehensive browser automation capabilities. It is intended for security testers and developers who need to scan web applications for common vulnerabilities and interact with browser pages programmatically.

How to use MCP Server Pentest?

Install dependencies with npx playwright install firefox, then run yarn install and npm run build. The installation automatically adds a configuration entry to your Claude config file, which points to the built server script. Once configured, you can invoke its tools from Claude.

Key features of MCP Server Pentest

  • Automatic XSS and SQL injection vulnerability detection
  • Full page and element screenshots
  • Browser navigation, clicking, hovering, form filling, and selection
  • Console log monitoring
  • JavaScript execution in the browser context

Use cases of MCP Server Pentest

  • Scanning web application URLs for reflected XSS vulnerabilities
  • Testing for SQL injection vulnerabilities in URL parameters
  • Automating browser interactions during security audits
  • Capturing screenshots of web pages or specific elements for documentation
  • Executing custom JavaScript to inspect or modify page behavior

常见问题

1

What vulnerability detection tools are available?

The server provides `broser_url_reflected_xss` for XSS testing and `browser_url_sql_injection` for SQL injection testing. Both accept a URL and a parameter name.

2

How do I install and configure the server?

Run `npx playwright install firefox`, then `yarn install` and `npm run build`. The installation automatically adds a configuration entry to your Claude MCP settings file with the server command pointing to the built `dist/index.js`.

3

What browser automation tools does it offer?

Tools include `browser_navigate`, `browser_screenshot`, `browser_click`, `browser_click_text`, `browser_hover`, `browser_hover_text`, `browser_fill`, `browser_select`, `browser_select_text`, and `browser_evaluate` for executing JavaScript.

4

Does it support console log monitoring?

Yes, console log monitoring is listed as a feature, though no dedicated tool is documented for it.

5

What are the runtime dependencies?

The server requires Node.js, Playwright (specifically Firefox), and the packages installed via `yarn install` and `npm run build`.

评论

其他 分类下的更多 MCP 服务器

P

PickFu MCP

PickFu MCP is a Model Context Protocol (MCP) server that connects AI assistants, developers, marketers, product managers, and AI agents to PickFu's consumer research platform. It enables users to create surveys, conduct

Lemon.io

lemon-io

Request dedicated senior developers to work on your project, write job descriptions, and prep technical interviews — all without leaving your Claude chat. Just describe what you need, and Lemon.io MCP does the rest. 1–3

EverArt

modelcontextprotocol

Model Context Protocol Servers

88.1K

LoadOptimizer

LoadOptimizer plans truck, container and pallet loads with a real optimization engine, straight from your AI assistant. Describe the order in plain language, for example "plan 36 Euro pallets on a standard 13.6 m trailer

Senso MCP for Joomla

sensomedia

Senso MCP turns a Joomla 5 or 6 site into a remote MCP server. It runs inside Joomla itself (no extra server, no Node.js bridge) and is secured with OAuth 2.1 and Joomla's own ACL. The free pack lets an AI assistant crea

广告合作