Mythic MCP

by xpn

409 downloads
Not rated
GitHub

About

A simple POC to expose Mythic as a MCP server

Details

Author
xpn
Downloads
409
Categories
Other

- Quick MCP demo for the Mythic C2 framework
- Enables LLMs to automate penetration testing steps
- Works with Claude Desktop and other MCP clients
- Uses uv and Python 3 for easy deployment
- Includes sample prompts for threat actor emulation

Setting up with Highlight

This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:

  1. Download and install Highlight from highlightai.com/download
  2. Navigate to the plugins tab and select "Add Custom Plugin"
  3. Configure the plugin with the settings below
    Plugin Name Mythic MCP
    Command (node, npx, python, etc.)

    Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.

  4. Enable "Start Automatically" if you want the plugin to start when Highlight launches

From the repository

Install uv and Python 3, then edit your claude_desktop_config.json to add a server entry pointing to the Mythic MCP directory with command, args (including Mythic admin credentials, host, and port), and launch Claude Desktop. Sample prompts are provided to task the LLM with threat‑actor emulation.

Claude Desktop / Cursor

Paste into your MCP client config file to install this server.

{
    "mcpServers": {
        "mythic mcp": {
            "mythic_mcp": {
                "command": "/Users/xpn/.local/bin/uv",
                "args": [
                    "--directory",
                    "/full/path/to/mythic_mcp/",
                    "run",
                    "main.py",
                    "mythic_admin",
                    "mythic_admin_password",
                    "localhost",
                    "7443"
                ]
            }
        }
    }
}

McpServers

{
    "mythic_mcp": {
        "command": "/Users/xpn/.local/bin/uv",
        "args": [
            "--directory",
            "/full/path/to/mythic_mcp/",
            "run",
            "main.py",
            "mythic_admin",
            "mythic_admin_password",
            "localhost",
            "7443"
        ]
    }
}

Mythic MCP

A quick MCP demo for Mythic, allowing LLMs to pentest on our behalf!

Requirements

1. uv
2. python3
3. Claude Desktop (or other MCP Client)

Usage with Claude Desktop

To deploy this MCP Server with Claude Desktop, you'll need to edit your claude_desktop_config.json to add the following:

{
    "mcpServers": {
        "mythic_mcp": {
            "command": "/Users/xpn/.local/bin/uv",
            "args": [
                "--directory",
                "/full/path/to/mythic_mcp/",
                "run",
                "main.py",
                "mythic_admin",
                "mythic_admin_password",
                "localhost",
                "7443"
            ]
        }
    }
}

Once done, kick off Claude Desktop. There are sample prompts to show how to task the LLM, but really anything will work along the lines of:

You are an automated pentester, tasked with emulating a specific threat actor. The threat actor is APT31. Your objective is: Add a flag to C:\win.txt on DC01. Perform any required steps to meet the objective, using only techniques documented by the threat actor.
No reviews yet — be the first

Sign in to leave a review

Use Google, GitHub, or an email account so ratings stay tied to real people.

Email sign in

No reviews posted yet.