ExternalAttacker MCP Server
About
A modular external attack surface mapping tool integrating tools for automated reconnaissance and bug bounty workflows.
Explore
Natural Language Interface: Run scans using plain English
Comprehensive Scanning Categories:
🌐 Subdomain Discovery (subfinder)
🔢 Port Scanning (naabu)
🌍 HTTP Analysis (httpx)
🛡️ CDN Detection (cdncheck)
🔐 TLS Analysis (tlsx)
📁 Directory Fuzzing (ffuf, gobuster)
* 📝 DNS Enumeration (dnsx)
Setting up with Highlight
This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:
- Download and install Highlight from highlightai.com/download
- Navigate to the plugins tab and select "Add Custom Plugin"
-
Configure the plugin with the settings below
Plugin Name
ExternalAttacker MCP ServerCommand (node, npx, python, etc.)Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
- Enable "Start Automatically" if you want the plugin to start when Highlight launches
From the repository
Python 3.8 or higher
Go (for installing tools)
MCP Client
1. Clone this repository:
git clone https://github.com/mordavid/ExternalAttacker-MCP.git
cd ExternalAttacker
2. Install Python dependencies:
pip install -r requirements.txt
3. Install required Go tools:
go install -v github.com/projectdiscovery/subfinder/v2/cmd/subfinder@latest
go install -v github.com/projectdiscovery/naabu/v2/cmd/naabu@latest
go install -v github.com/projectdiscovery/httpx/cmd/httpx@latest
go install -v github.com/projectdiscovery/cdncheck/cmd/cdncheck@latest
go install -v github.com/projectdiscovery/tlsx/cmd/tlsx@latest
go install -v github.com/ffuf/ffuf@latest
go install github.com/OJ/gobuster/v3@latest
go install -v github.com/projectdiscovery/dnsx/cmd/dnsx@latest
4. Run ExternalAttacker-App.py
```bash
python ExternalAttacker-App.py
Example queries you can ask through the MCP:
"Scan example.com for subdomains"
"Check open ports on 192.168.1.1"
"Analyze HTTP services on test.com"
"Check if domain.com uses a CDN"
"Analyze SSL configuration of site.com"
- "Fuzz endpoints on target.com"
Claude Desktop / Cursor
Paste into your MCP client config file to install this server.
{
"mcpServers": {
"externalattacker mcp server": {
"ExternalAttacker-MCP": {
"command": "python",
"args": [
"<Your_Path>\\ExternalAttacker-MCP.py"
]
}
}
}
}McpServers
{
"ExternalAttacker-MCP": {
"command": "python",
"args": [
"<Your_Path>\\ExternalAttacker-MCP.py"
]
}
}
Model Context Protocol (MCP) Server for External Attack Surface Management
ExternalAttacker is a powerful integration that brings automated scanning capabilities with natural language interface for comprehensive external attack surface management and reconnaissance.
> 🔍 Automated Attack Surface Management with AI!
> Scan domains, analyze infrastructure, and discover vulnerabilities using natural language.
🔍 What is ExternalAttacker?
ExternalAttacker combines the power of:
Automated Scanning: Comprehensive toolset for external reconnaissance
Model Context Protocol (MCP): An open protocol for creating custom AI tools
Natural Language Processing: Convert plain English queries into scanning commands
📱 Community
Join our Telegram channel for updates, tips, and discussion:
- Telegram: https://t.me/root_sec
✨ Features
Natural Language Interface: Run scans using plain English
Comprehensive Scanning Categories:
🌐 Subdomain Discovery (subfinder)
🔢 Port Scanning (naabu)
🌍 HTTP Analysis (httpx)
🛡️ CDN Detection (cdncheck)
🔐 TLS Analysis (tlsx)
📁 Directory Fuzzing (ffuf, gobuster)
📝 DNS Enumeration (dnsx)
📋 Prerequisites
Python 3.8 or higher
Go (for installing tools)
MCP Client
🔧 Installation
1. Clone this repository:
git clone https://github.com/mordavid/ExternalAttacker-MCP.git
cd ExternalAttacker
2. Install Python dependencies:
pip install -r requirements.txt
3. Install required Go tools:
go install -v github.com/projectdiscovery/subfinder/v2/cmd/subfinder@latest
go install -v github.com/projectdiscovery/naabu/v2/cmd/naabu@latest
go install -v github.com/projectdiscovery/httpx/cmd/httpx@latest
go install -v github.com/projectdiscovery/cdncheck/cmd/cdncheck@latest
go install -v github.com/projectdiscovery/tlsx/cmd/tlsx@latest
go install -v github.com/ffuf/ffuf@latest
go install github.com/OJ/gobuster/v3@latest
go install -v github.com/projectdiscovery/dnsx/cmd/dnsx@latest
4. Run ExternalAttacker-App.py
python ExternalAttacker-App.py
# Access http://localhost:6991
5. Configure the MCP Server
"mcpServers": {
"ExternalAttacker-MCP": {
"command": "python",
"args": [
"<Your_Path>\\ExternalAttacker-MCP.py"
]
}
}
🚀 Usage
Example queries you can ask through the MCP:
"Scan example.com for subdomains"
"Check open ports on 192.168.1.1"
"Analyze HTTP services on test.com"
"Check if domain.com uses a CDN"
"Analyze SSL configuration of site.com"
"Fuzz endpoints on target.com"
📜 License
MIT License
🙏 Acknowledgments
The ProjectDiscovery team for their excellent security tools
- The MCP community for advancing AI-powered tooling
---
_Note: This is a security tool. Please use responsibly and only on systems you have permission to test._
Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.
