Security Operations Multi-Tool Platform (MCP)

by securityfortech

203 stars
465 downloads
Not rated
GitHub

About

All-in-one security testing toolbox that brings together popular open source tools through a single MCP interface. Connected to an AI agent, it enables tasks like pentesting, bug bounty hunting, threat hunting, and more.

Details

Author
securityfortech
GitHub stars
203
Downloads
465
Categories
Developer Tools

- Unified single entry point for multiple security tools.
- Docker support for easy deployment and isolation.
- Consistent JSON output format across all integrated tools.
- Robust error handling and reporting.
- Extensible design for adding new tools and functionality.
- Includes 15+ pre-integrated tools covering web, network, recon, and cryptography.

Setting up with Highlight

This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:

  1. Download and install Highlight from highlightai.com/download
  2. Navigate to the plugins tab and select "Add Custom Plugin"
  3. Configure the plugin with the settings below
    Plugin Name Security Operations Multi-Tool Platform (MCP)
    Command (node, npx, python, etc.)

    Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.

  4. Enable "Start Automatically" if you want the plugin to start when Highlight launches

From the repository

Install via Docker (recommended) by cloning the repository, building the image with docker build -t secops-mcp ., then running the container with docker run -it --rm secops-mcp. Alternatively, manually clone, create a Python virtual environment, install dependencies from requirements.txt, and ensure all tools are in the system PATH. Start the application with python main.py to access the unified interface, which returns results in a standard JSON format.

Claude Desktop / Cursor

Paste into your MCP client config file to install this server.

{
    "mcpServers": {
        "security operations multi-tool platform (mcp)": {
            "secops-mcp": {
                "command": "docker",
                "args": [
                    "build",
                    "-t",
                    "secops-mcp",
                    "."
                ]
            }
        }
    }
}

McpServers

{
    "secops-mcp": {
        "command": "docker",
        "args": [
            "build",
            "-t",
            "secops-mcp",
            "."
        ]
    }
}

Security Operations Multi-Tool Platform (MCP)

Trust Score

A comprehensive security operations platform that integrates multiple security tools into a unified interface. This platform provides a centralized way to run various security scanning and testing tools.

Features

- Unified Interface: Single entry point for multiple security tools
- Docker Support: Easy deployment using Docker
- JSON Output: Consistent JSON output format across all tools
- Error Handling: Robust error handling and reporting
- Extensible: Easy to add new tools and functionality

Included Tools

- Nuclei: Fast and customizable vulnerability scanner
- FFUF: Fast web fuzzer and content discovery tool
- Amass: In-depth attack surface mapping and external asset discovery
- Arjun: HTTP parameter discovery tool for finding hidden parameters
- Dirsearch: Web path scanner
- Gospider: Fast web spider for crawling and URL discovery
- Hashcat: Advanced password recovery
- HTTPX: Fast and multi-purpose HTTP toolkit
- IPInfo: IP address information gathering
- Nmap: Network exploration and security auditing
- SQLMap: Automatic SQL injection and database takeover tool
- Subfinder: Subdomain discovery tool
- TLSX: TLS/SSL scanning and analysis
- WFuzz: Web application fuzzer
- XSStrike: Advanced XSS detection and exploitation

Tool Categories

Web Application Security

- Nuclei: Vulnerability scanning with custom templates - FFUF: Fast web fuzzing and content discovery - WFuzz: Web application fuzzing - XSStrike: XSS detection and exploitation - SQLMap: SQL injection testing and exploitation - Arjun: HTTP parameter discovery and testing - Gospider: Web crawling and URL discovery - Dirsearch: Directory and file enumeration

Network Security

- Nmap: Network scanning and service enumeration - HTTPX: HTTP probing and analysis - TLSX: TLS/SSL configuration analysis

Reconnaissance

- Amass: Attack surface mapping and asset discovery - Subfinder: Subdomain enumeration - IPInfo: IP address intelligence gathering

Cryptography

- Hashcat: Password cracking and hash analysis

Recent Additions

Gospider Integration

- Web Crawling: Automated website crawling and URL discovery - Multiple Output Formats: JSON and text output support - Filtering Capabilities: Extension-based filtering and content filtering - Configurable Depth: Customizable crawling depth and concurrency - Subdomain Support: Option to include subdomains in crawling - Form Detection: Automatic detection of HTML forms - Secret Discovery: Identification of potential sensitive information

Arjun Integration

- Parameter Discovery: Find hidden HTTP parameters in web applications - Multiple HTTP Methods: Support for GET, POST, PUT, and other methods - Bulk Scanning: Scan multiple URLs simultaneously - Custom Wordlists: Use custom parameter wordlists - Stable Mode: Reduced false positives with stable scanning mode - Custom Headers: Support for custom HTTP headers and authentication - Threading Support: Configurable threading for faster scans

Installation

Using Docker (Recommended)

1. Clone the repository:

   git clone https://github.com/securityfortech/secops-mcp.git
cd secops-mcp

2. Build the Docker image:

   docker build -t secops-mcp .

3. Run the container:

   docker run -it --rm secops-mcp

Manual Installation

1. Clone the repository:

   git clone https://github.com/securityfortech/secops-mcp.git
cd secops-mcp

2. Create and activate a virtual environment:

   python -m venv venv
source venv/bin/activate # On Windows: venv\Scripts\activate

3. Install dependencies:

   pip install -r requirements.txt

4. Install required tools:
- Follow the installation instructions for each tool in the tools/ directory
- Ensure all tools are in your system PATH

Usage

1. Start the application:

   python main.py

2. The application will provide a unified interface for running various security tools.

3. Each tool returns results in a consistent JSON format:

   {
"success": boolean,
"error": string (if error),
"results": object (if success)
}

Usage Examples

Gospider Web Crawling

```python
No reviews yet — be the first

Sign in to leave a review

Use Google, GitHub, or an email account so ratings stay tied to real people.

Email sign in

No reviews posted yet.