π
io.github.operantlabs/operant-mcp
Security testing MCP server for penetration testing, forensics, and vulnerability assessment
0 installs
Trust: 37 β Low
Security
Ask AI about io.github.operantlabs/operant-mcp
Powered by Claude Β· Grounded in docs
I know everything about io.github.operantlabs/operant-mcp. Ask me about installation, configuration, usage, or troubleshooting.
0/500
Loading tools...
Reviews
Documentation
operant-mcp
Security testing MCP server with 51 tools for penetration testing, network forensics, memory analysis, and vulnerability assessment.
Quick Start
npx operant-mcp
Or install globally:
npm install -g operant-mcp
operant-mcp
Usage with Claude Code
Add to your MCP config:
{
"mcpServers": {
"operant": {
"command": "npx",
"args": ["-y", "operant-mcp"]
}
}
}
Tools (51)
SQL Injection (6)
sqli_where_bypassβ Test OR-based WHERE clause bypasssqli_login_bypassβ Test login form SQL injectionsqli_union_extractβ UNION-based data extractionsqli_blind_booleanβ Boolean-based blind SQLisqli_blind_timeβ Time-based blind SQLisqli_file_readβ Read files via LOAD_FILE()
XSS (2)
xss_reflected_testβ Test reflected XSS with 10 payloadsxss_payload_generateβ Generate context-aware XSS payloads
Command Injection (2)
cmdi_testβ Test OS command injectioncmdi_blind_detectβ Blind command injection via sleep timing
Path Traversal (1)
path_traversal_testβ Test directory traversal with encoding variants
SSRF (2)
ssrf_testβ Test SSRF with localhost bypass variantsssrf_cloud_metadataβ Test cloud metadata access via SSRF
PCAP/Network Forensics (8)
pcap_overviewβ Protocol hierarchy and endpoint statspcap_extract_credentialsβ Extract FTP/HTTP/SMTP credentialspcap_dns_analysisβ DNS query analysispcap_http_objectsβ Export HTTP objectspcap_detect_scanβ Detect port scanningpcap_follow_streamβ Follow TCP/UDP streamspcap_tls_analysisβ TLS/SNI analysispcap_llmnr_ntlmβ Detect LLMNR/NTLM attacks
Reconnaissance (7)
recon_quickβ Quick recon (robots.txt, headers, common dirs)recon_dnsβ Full DNS enumerationrecon_vhostβ Virtual host discoveryrecon_tls_sansβ Extract SANs from TLS certificatesrecon_directory_bruteforceβ Directory brute-forcerecon_git_secretsβ Search git repos for secretsrecon_s3_bucketβ Test S3 bucket permissions
Memory Forensics (3)
volatility_linuxβ Linux memory analysis (Volatility 2)volatility_windowsβ Windows memory analysis (Volatility 3)memory_detect_rootkitβ Linux rootkit detection
Malware Analysis (2)
maldoc_analyzeβ Full OLE document analysis pipelinemaldoc_extract_macrosβ Extract VBA macros
Cloud Security (2)
cloudtrail_analyzeβ CloudTrail log analysiscloudtrail_find_anomaliesβ Detect anomalous CloudTrail events
Authentication (3)
auth_csrf_extractβ Extract CSRF tokensauth_bruteforceβ Username enumeration + credential brute-forceauth_cookie_tamperβ Cookie tampering test
Access Control (2)
idor_testβ Test for IDOR vulnerabilitiesrole_escalation_testβ Test privilege escalation
Business Logic (2)
price_manipulation_testβ Test price/quantity manipulationcoupon_abuse_testβ Test coupon stacking/reuse
Clickjacking (2)
clickjacking_testβ Test X-Frame-Options/CSPframe_buster_bypassβ Test frame-busting bypass
CORS (1)
cors_testβ Test CORS misconfigurations
File Upload (1)
file_upload_testβ Test file upload bypasses
NoSQL Injection (2)
nosqli_auth_bypassβ MongoDB auth bypassnosqli_detectβ NoSQL injection detection
Deserialization (1)
deserialization_testβ Test insecure deserialization
GraphQL (2)
graphql_introspectβ Full schema introspectiongraphql_find_hiddenβ Discover hidden fields
Prompts (8)
Methodology guides for structured security assessments:
web_app_pentestβ Full web app pentest methodologypcap_forensicsβ PCAP analysis workflowmemory_forensicsβ Memory dump analysis (Linux/Windows)recon_methodologyβ Reconnaissance checklistmalware_analysisβ Malware document analysiscloud_security_auditβ CloudTrail analysis workflowsqli_methodologyβ SQL injection testing guidexss_methodologyβ XSS testing guide
System Requirements
Tools require various CLI utilities depending on the module:
- Most tools:
curl - PCAP analysis:
tshark(Wireshark CLI) - DNS recon:
dig,host - Memory forensics:
volatility/vol.py/vol3 - Malware analysis:
olevba,oledump.py - Cloud analysis:
jq - Secrets scanning:
git
License
MIT
