# Add to your Claude Code skills
git clone https://github.com/FuzzingLabs/mcp-security-hub
README.md
Offensive Security MCP Servers
Production-ready, Dockerized MCP (Model Context Protocol) servers for offensive security tools. Enable AI assistants like Claude to perform security assessments, vulnerability scanning, and binary analysis.
Features
38 MCP Servers covering reconnaissance, web security, binary analysis, blockchain security, cloud security, code security, secrets detection, threat intelligence, OSINT, Active Directory, fuzzing, and more
300+ Security Tools accessible via natural language through Claude or other MCP clients
Production Hardened - Non-root containers, minimal images, Trivy-scanned
Docker Compose orchestration for multi-tool workflows
CI/CD Ready with GitHub Actions for automated builds and security scanning
Quick Start
# Clone the repository
git clone https://github.com/FuzzingLabs/mcp-security-hub
cd mcp-security-hub
# Build all MCP servers
docker-compose build
# Start specific servers
docker-compose up nmap-mcp nuclei-mcp -d
# Verify health
docker-compose ps
| Server | Tools | Description |
|--------|-------|-------------|
| nuclei-mcp | 7 | Template-based vulnerability scanning with 8000+ templates |
| sqlmap-mcp | 8 | SQL injection detection and exploitation |
| nikto-mcp | - | Wrapper for Nikto MCP web server scanner |
| ffuf-mcp | 9 | Web fuzzing for directories, files, parameters, and virtual hosts |
| waybackurls-mcp | 3 | Fetch historical URLs from Wayback Machine for reconnaissance |
| burp-mcp | - | Wrapper for official Burp Suite MCP |
Binary Analysis (6 servers)
| Server | Tools | Description |
|--------|-------|-------------|
| radare2-mcp | 32 | Wrapper for official radare2-mcp - disassembly, decompilation |
| binwalk-mcp | 6 | Firmware analysis, signature scanning, extraction |
| yara-mcp | 7 | Pattern matching for malware classification |
| capa-mcp | 5 | Capability detection in executables |
| ghidra-mcp | - | Wrapper for pyghidra-mcp - Headless AI-powered reverse engineering |
| ida-mcp | - | Wrapper for ida-pro-mcp - IDA Pro integration |
Blockchain Security (3 servers)
| Server | Tools | Description |
|--------|-------|-------------|
| daml-viewer-mcp | 1 | DAML access-control table generation and run tracking |
| medusa-mcp | 4 | High-performance smart contract fuzzer for Solidity |
| solazy-mcp | 8 | Solana sBPF static analysis and reverse engineering |
Cloud Security (3 servers)
| Server | Tools | Description |
|--------|-------|-------------|
| trivy-mcp | 7 | Container, filesystem, and IaC vulnerability scanning |
| prowler-mcp | 6 | AWS/Azure/GCP security auditing and compliance |
| roadrecon-mcp | 6 | Azure AD enumeration via RoadRecon |
Secrets Detection (1 server)
| Server | Tools | Description |
|--------|-------|-------------|
| gitleaks-mcp | 5 | Find secrets and credentials in git repos and files |
Exploitation (1 server)
| Server | Tools | Description |
|--------|-------|-------------|
| searchsploit-mcp | 5 | Exploit-DB search and retrieval |
Fuzzing (2 servers)
| Server | Tools | Description |
|--------|-------|-------------|
| boofuzz-mcp | 4 | Network protocol fuzzing using Boofuzz |
| dharma-mcp | 2 | Grammar-based test case generation |
OSINT (2 servers)
| Server | Tools | Description |
|--------|-------|-------------|
| maigret-mcp | - | Wrapper for mcp-maigret - Username OSINT across 2500+ sites |
| dnstwist-mcp | - | Wrapper for mcp-dnstwist - Typosquatting/phishing detection |
Threat Intelligence (2 servers)
| Server | Tools | Description |
|--------|-------|-------------|
| virustotal-mcp | - | Wrapper for mcp-virustotal - Malware analysis and threat intel |
| otx-mcp | - | Wrapper for OTX MCP - AlienVault Open Threat Exchange |
Active Directory (1 server)
| Server | Tools | Description |
|--------|-------|-------------|
| bloodhound-mcp | 75+ | Wrapper for BloodHound-MCP-AI - AD attack path analysis |
Password Cracking (1 server)
| Server | Tools | Description |
|--------|-------|-------------|
| hashcat-mcp | - | Wrapper for hashcat-mcp - Natural language hash cracking |
Code Security (1 server)
| Server | Tools | Description |
|--------|-------|-------------|
| semgrep-mcp | 7 | Wrapper for Semgrep MCP - Static code analysis with 5000+ rules |
Meta (1 server)
| Server | Tools | Description |
|--------|-------|-------------|
| mcp-scan | - | Wrapper for mcp-scan - Scan MCP servers for vulnerabilities |
Usage Examples
Network Reconnaissance
You: "Scan 192.168.1.0/24 for web servers and identify technologies"
Claude: I'll perform a network scan and technology fingerprinting.
[Uses nmap-mcp to scan ports 80,443,8080]
[Uses whatweb-mcp to fingerprint discovered hosts]
Found 12 web servers:
- 192.168.1.10: Apache 2.4.52, WordPress 6.4
- 192.168.1.15: nginx 1.24, React application
...
Vulnerability Assessment
You: "Check example.com for common vulnerabilities"
Claude: I'll run a vulnerability scan using nuclei templates.
[Uses nuclei-mcp with cves, exposures, and misconfigurations templates]
Found 3 issues:
- HIGH: CVE-2024-1234 - Outdated jQuery version
- MEDIUM: Exposed .git directory
- INFO: Missing security headers
The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.
