Offensive Security Toolkit

by cybersecurityup

7 stars

Not rated

GitHub

About

Provides cybersecurity professionals with penetration testing capabilities through specialized servers for payload generation, reconnaissance, shellcode building, and security monitoring.

Details

Author: cybersecurityup
Repository: JoasASantos/Offensive-MCP-AI
GitHub stars: 7
Categories: Design, Workplace, Developer Tools, AI, Security, Communication, Infrastructure
Tags: #integration

Setting up with Highlight

This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:

Download and install Highlight from highlightai.com/download
Navigate to the plugins tab and select "Add Custom Plugin"
Configure the plugin with the settings below
Plugin Name Offensive Security Toolkit

Command (node, npx, python, etc.) /full/path/to/python
Arguments
- Argument 1 mcp_wazuh_server.py
Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
Enable "Start Automatically" if you want the plugin to start when Highlight launches

Setting up with Cursor

Open Cursor's settings
Navigate to the MCP section
Click "Add new Global MCP server"
Copy and paste the configuration below based on your operating system

JSON

{
    "mcpServers": {
        "offensive security toolkit": {
            "cwd": "string",
            "env": {},
            "args": [
                "mcp_wazuh_server.py"
            ],
            "shell": false,
            "command": "/full/path/to/python"
        }
    }
}

JSON

{
    "mcpServers": {
        "offensive security toolkit": {
            "cwd": "string",
            "env": {},
            "args": [
                "mcp_wazuh_server.py"
            ],
            "shell": false,
            "command": "/full/path/to/python"
        }
    }
}

JSON

{
    "mcpServers": {
        "offensive security toolkit": {
            "cwd": "string",
            "env": {},
            "args": [
                "mcp_wazuh_server.py"
            ],
            "shell": false,
            "command": "/full/path/to/python"
        }
    }
}

Setting up with Claude Desktop

Open Claude Desktop's settings
Go to the Integrations tab
Click "Add MCP Server"
Use the configuration below based on your operating system

Note: Make sure Claude Desktop is running before attempting to connect.

JSON

{
    "mcpServers": {
        "offensive security toolkit": {
            "cwd": "string",
            "env": {},
            "args": [
                "mcp_wazuh_server.py"
            ],
            "shell": false,
            "command": "/full/path/to/python"
        }
    }
}

JSON

{
    "mcpServers": {
        "offensive security toolkit": {
            "cwd": "string",
            "env": {},
            "args": [
                "mcp_wazuh_server.py"
            ],
            "shell": false,
            "command": "/full/path/to/python"
        }
    }
}

JSON

{
    "mcpServers": {
        "offensive security toolkit": {
            "cwd": "string",
            "env": {},
            "args": [
                "mcp_wazuh_server.py"
            ],
            "shell": false,
            "command": "/full/path/to/python"
        }
    }
}

Setting up with Windsurf

Open Windsurf's preferences
Go to the Integrations section
Click "Add MCP Integration"
Use the configuration below based on your operating system

JSON

{
    "mcpServers": {
        "offensive security toolkit": {
            "cwd": "string",
            "env": {},
            "args": [
                "mcp_wazuh_server.py"
            ],
            "shell": false,
            "command": "/full/path/to/python"
        }
    }
}

JSON

{
    "mcpServers": {
        "offensive security toolkit": {
            "cwd": "string",
            "env": {},
            "args": [
                "mcp_wazuh_server.py"
            ],
            "shell": false,
            "command": "/full/path/to/python"
        }
    }
}

JSON

{
    "mcpServers": {
        "offensive security toolkit": {
            "cwd": "string",
            "env": {},
            "args": [
                "mcp_wazuh_server.py"
            ],
            "shell": false,
            "command": "/full/path/to/python"
        }
    }
}

Setting up with Cline

Open Cline's settings
Navigate to the Integrations section
Click "Add MCP Server"
Copy and paste the configuration below based on your operating system

Note: Make sure to restart Cline after adding the configuration.

JSON

{
    "mcpServers": {
        "offensive security toolkit": {
            "cwd": "string",
            "env": {},
            "args": [
                "mcp_wazuh_server.py"
            ],
            "shell": false,
            "command": "/full/path/to/python"
        }
    }
}

JSON

{
    "mcpServers": {
        "offensive security toolkit": {
            "cwd": "string",
            "env": {},
            "args": [
                "mcp_wazuh_server.py"
            ],
            "shell": false,
            "command": "/full/path/to/python"
        }
    }
}

JSON

{
    "mcpServers": {
        "offensive security toolkit": {
            "cwd": "string",
            "env": {},
            "args": [
                "mcp_wazuh_server.py"
            ],
            "shell": false,
            "command": "/full/path/to/python"
        }
    }
}

Setting up with Goose

Open Goose's preferences
Go to the Integrations tab
Select "MCP Servers"
Click "Add New Server"
Use the configuration below based on your operating system

JSON

{
    "mcpServers": {
        "offensive security toolkit": {
            "cwd": "string",
            "env": {},
            "args": [
                "mcp_wazuh_server.py"
            ],
            "shell": false,
            "command": "/full/path/to/python"
        }
    }
}

JSON

{
    "mcpServers": {
        "offensive security toolkit": {
            "cwd": "string",
            "env": {},
            "args": [
                "mcp_wazuh_server.py"
            ],
            "shell": false,
            "command": "/full/path/to/python"
        }
    }
}

JSON

{
    "mcpServers": {
        "offensive security toolkit": {
            "cwd": "string",
            "env": {},
            "args": [
                "mcp_wazuh_server.py"
            ],
            "shell": false,
            "command": "/full/path/to/python"
        }
    }
}

From the repository

pip install modelcontextprotocol

Claude Desktop / Cursor

Paste into your MCP client config file to install this server.

{
    "mcpServers": {
        "offensive security toolkit": {
            "cwd": "string",
            "env": {},
            "args": [
                "mcp_wazuh_server.py"
            ],
            "shell": false,
            "command": "/full/path/to/python"
        }
    }
}

Linux

{
    "cwd": "string",
    "env": [],
    "args": [
        "mcp_wazuh_server.py"
    ],
    "shell": false,
    "command": "/full/path/to/python"
}

Macos

{
    "cwd": "string",
    "env": [],
    "args": [
        "mcp_wazuh_server.py"
    ],
    "shell": false,
    "command": "/full/path/to/python"
}

Windows

{
    "cwd": "string",
    "env": [],
    "args": [
        "mcp_wazuh_server.py"
    ],
    "shell": false,
    "command": "/full/path/to/python"
}

Offensive-MCP-AI

🔮 Future Work Using MCP and AI

1. Autonomous Red Team Agents
Build LLM-driven agents that autonomously conduct reconnaissance, payload generation, exploitation and reporting, all orchestrated via MCP tools.

2. AI-Powered SOC Analyst
Integrate Wazuh + Suricata + Zeek logs and use MCP to let Claude analyze incidents, detect lateral movement, and recommend response actions in real-time.

3. Malware Dev Studio (LLM + MCP)
Use Claude + MCP to automate shellcode generation, obfuscation, sandbox evasion, and EDR bypass strategies through tools like Capstone, Donut, and Sliver.

4. Threat Hunting Automation
Develop proactive AI workflows that analyze logs, correlate indicators, and hunt based on threat intelligence feeds via MCP resources and tools.

5. Agent-Based Purple Team Simulator
Combine MCP with ATT&CK simulations, where Claude orchestrates both Red and Blue side techniques (Atomic Red Team, Caldera, Sigma/YARA rule generation).

6. CI/CD + DevSecOps Integration
Use MCP to review code pushed to GitHub, scan secrets, trigger security tools (Trufflehog, Gitleaks), and send secure alerts or PR recommendations.

7. Auto Incident Report Generator
Claude consumes logs and tool outputs via MCP and generates full incident reports (including diagrams and mitigations) in Markdown or PDF formats.

8. Cybersecurity Tutor / Trainer Mode
Claude explains what each tool does, simulates attacks in safe lab environments, and evaluates user responses via MCP simulation tools.

---

🔗 Installation & Integration Links

✅ Install MCP CLI and SDK (Python)

pip install modelcontextprotocol

No reviews yet — be the first

Use Google, GitHub, or an email account so ratings stay tied to real people.

Email sign in

No reviews posted yet.

About

Details

Jump to

Setting up with Highlight

From the repository

Claude Desktop / Cursor

Linux

Macos

Windows

Offensive-MCP-AI

🔮 Future Work Using MCP and AI

🔗 Installation & Integration Links

✅ Install MCP CLI and SDK (Python)

Install

More like this

Sentry

Github

Git

GitLab

Context 7

Playwright