广告合作
MCP.so
登录

MCP Server Pentest

@MCP-Mirror

代码仓库

基本信息

分类

其他

许可证

MIT license

传输方式

stdio

作者

MCP-Mirror

关于 MCP Server Pentest

Mirror of

#9olidity#pentest#security-testing

MCP Server Pentest 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "9olidity_MCP-Server-Pentest": {
      "url": "https://test.com",
      "paramName": "text"
    }
  }
}

MCP Server Pentest 工具

工具列表暂未提供

当前收录暂时没有可展示的工具列表，不代表服务没有工具。请查阅项目文档了解支持的能力。

点击上方按钮,直接连接服务器端点实时获取工具列表。

概览

What is MCP Server Pentest?

MCP Server Pentest is a server that integrates browser automation with security testing, enabling automated detection of XSS and SQL injection vulnerabilities in URLs. It also provides full browser control for navigation, screenshots, click interactions, and JavaScript execution, targeting developers and security testers who need to automate web security checks.

How to use MCP Server Pentest?

Install by running npx playwright install firefox, yarn install, and npm run build. Then add the provided JSON configuration block to your Claude config file, pointing to the built dist/index.js. Use the exposed tools (e.g., broser_url_reflected_xss, browser_url_sql_injection) by passing a URL and parameter name as arguments.

Key features of MCP Server Pentest

  • Automatic XSS vulnerability detection in URLs
  • Automatic SQL injection vulnerability detection in URLs
  • Full-page or element-specific screenshot capture
  • Browser navigation, clicking, form filling, and text selection
  • Console log monitoring and JavaScript execution in browser context

Use cases of MCP Server Pentest

  • Automatically test a web application’s URL parameters for reflected XSS
  • Scan form inputs or query strings for SQL injection flaws
  • Take screenshots of vulnerable pages for reporting
  • Fill and submit forms to test login or search endpoints
  • Execute custom JavaScript to extract runtime page data

常见问题

1

What runtime dependencies are required?

The server requires Node.js, the Playwright package, and a Firefox browser (installed via `npx playwright install firefox`). It runs as a command-line MCP server.

2

Which browsers are supported?

Firefox is explicitly installed and used; the README does not mention Chrome or other browsers.

3

Can it interact with dynamic content?

Yes – tools for clicking, hovering, filling inputs, and selecting dropdown options are available, along with JavaScript evaluation in the browser context.

4

Where are screenshots saved?

The README does not specify a default save location; screenshots are likely stored in the working directory or must be explicitly named via the `name` parameter in `browser_screenshot`.

评论

其他 分类下的更多 MCP 服务器

Codelf

unbug

A search tool helps dev to solve the naming things problem.

14.2K

Blender

ahujasid

Open-source MCP to use Blender with any LLM

23.6K
P

PickFu MCP

PickFu MCP is a Model Context Protocol (MCP) server that connects AI assistants, developers, marketers, product managers, and AI agents to PickFu's consumer research platform. It enables users to create surveys, conduct

Maestro

mobile-dev-inc

Painless E2E Automation for Mobile and Web

14.8K

The Living Bread

The Living Bread

A free remote MCP server for The Living Bread. Bible passages read word for word from a stored public domain text with an evidence label, keyword search and cross references, real churches, gatherings and prayer groups w

广告合作