1. Conduid
  2. Developer Tools
  3. Vibehacker Metasploit MCP
MCP server · Developer Tools

Vibehacker Metasploit MCP

MCP server: Vibehacker Metasploit MCP

Unclaimed Apache-2.0 last commit a year ago devtools
50Fair

Scored 5 months ago · breakdown

About Vibehacker Metasploit MCP

Vibehacker Metasploit MCP is an MCP server published by foolsec in the Developer Tools category: mCP server: Vibehacker Metasploit MCP.

The repository has 14 stars and 5 forks, with the last commit a year ago. Six months or more without a commit doesn't mean the server is broken, but check the open issues before depending on it in production.

Install

From source
git clone https://github.com/foolsec/vibehacker_metasploit_mcp

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Vibehacker Metasploit MCP

Powered by Claude · Grounded in docs

I know everything about Vibehacker Metasploit MCP. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

Static checks derived from the repository 7 days ago. Heuristics on the source, not an audit.

  • ✓README presentThe repository ships documentation.
  • ✓License declaredUsable under a stated license.
  • !Tests presentNo tests found. Behaviour changes may go unnoticed between versions.
  • ✓Dependencies pinnedA lockfile pins dependency versions.
  • !No dynamic code executionSource scan found eval or shell execution. Review how tool inputs reach it before granting credentials.
  • !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.

README

Vibehacker Metasploit MCP

A FastMCP-based interface for Metasploit Framework, enabling AI agents to interact with Metasploit capabilities.

Prerequisites

  • Python 3.10+
  • Metasploit Framework
  • uv (Python package manager)

Setup with uv

This project uses uv for dependency management. uv is a fast, reliable Python package installer and resolver.

Installing uv

If you don't have uv installed:

pip install uv

Setting up the project

  1. Clone the repository:
git clone https://github.com/foolsec/vibehacker_metasploit_mcp.git
cd vibehacker_metasploit_mcp
  1. Create and activate a virtual environment with uv:
uv venv
source .venv/bin/activate  # On Windows: .venv\Scripts\activate
  1. Install dependencies:
uv pip install -e .

Running Metasploit RPC Server

Before running the application, start the Metasploit RPC server:

# Full configuration with all options
msfrpcd -P kalipassword -S -a 127.0.0.1 -p 55553

Or use the simpler command to start the RPC server in the background on the default port (55553):

msfrpcd -P your_password

Environment Variables

Set the following environment variables:

export MSF_PASSWORD=kalipassword
export MSF_SERVER=127.0.0.1
export MSF_PORT=55553

Running the Application

python main.py

or to test the tools

mcp dev main.py

Features

  • List available Metasploit exploits
  • List available payloads
  • Generate payloads
  • Run exploits against targets
  • Scan targets
  • Manage active sessions
  • Send commands to sessions

License

See the LICENSE file for details.

README fetched from the repository 7 days ago. The original is authoritative.

Questions

About Vibehacker Metasploit MCP

How do I install Vibehacker Metasploit MCP?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Vibehacker Metasploit MCP safe to use with an AI agent?

Its trust score is 50 out of 100 (fair). It passes 3 of the 6 static security checks run so far; the failures are listed above. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Vibehacker Metasploit MCP still maintained?

The last commit was a year ago and 2 open issues. That's long enough that you should check whether the maintainer is responding to issues before depending on it.