# mcp-security-hub

A growing collection of MCP servers bringing offensive security tools to AI assistants. Nmap, Ghidra, Nuclei, SQLMap, Hashcat and more.

- **Kind:** MCP server
- **Owner:** FuzzingLabs
- **Source:** https://github.com/FuzzingLabs/mcp-security-hub
- **Runtime:** python
- **License:** MIT
- **Transports:** stdio
- **Pinned commit:** `b6800740da9965e9dd3fde2ec3cf4c775c358f72`
- **Page:** https://forefy.com/mcps/ce089a96-e8a9-5a17-a3ee-6f72e995d212
- **API (JSON):** https://forefy.com/api/asr/mcps/ce089a96-e8a9-5a17-a3ee-6f72e995d212

## Install

Ask your agent: `Install the mcp-security-hub MCP server securely from: https://forefy.com/mcps/ce089a96-e8a9-5a17-a3ee-6f72e995d212 and register it with my agent`

## Tools (69)

- `binwalk_scan`: Scan a firmware file for embedded files, filesystems, and signatures.
- `binwalk_extract`: Extract embedded files and filesystems from firmware.
- `binwalk_entropy`: Analyze file entropy to detect compressed or encrypted sections.
- `binwalk_hexdump`: Display hex dump of a file section. Useful for examining
- `get_scan_results`: Retrieve results from a previous scan by scan ID.
- `list_extractions`: List all completed extractions with their file contents.
- `list_active_scans`: List currently running scans.
- `capa_analyze`: Analyze a binary file for capabilities using Mandiant's capa.
- `get_analysis_results`: Retrieve results from a previous analysis.
- `yara_scan`: Scan files or directories using YARA rules for malware detection
- `yara_scan_with_rules`: Scan files using custom inline YARA rules.
- `list_rulesets`: List available YARA rule sets and their details.
- `damlviewer_generate_table`: Generate a DAML access-control markdown table from a project directory or a single `.daml` file.
- `get_run_results`: Retrieve results from a previous run by run ID.
- `list_runs`: List completed DAML viewer runs (most recent first).
- `list_active_runs`: List currently running DAML viewer jobs.
- `medusa_init`: Initialize Medusa in the current directory.
- `medusa_fuzz`: Run the Medusa fuzzing process.
- `medusa_get_config`: Read medusa.json.
- `medusa_update_config`: Update medusa.json fields.
- `solazy_reverse`: Reverse engineer a compiled Solana sBPF `.so` file.
- `solazy_sast`: Run SAST (Starlark rules) on an Anchor or SBF project directory.
- `solazy_recap`: Generate an audit-friendly markdown recap for an Anchor project.
- `solazy_fetcher`: Fetch a deployed program bytecode (or account) from a Solana RPC endpoint.
- `solazy_dotting`: Reinsert functions (clusters) into a reduced CFG `.dot` using a JSON config.
- `prowler_scan`: Run security assessment on AWS, Azure, GCP, or Kubernetes.
- `prowler_compliance`: Check cloud environment against compliance frameworks
- `list_checks`: List available security checks for a cloud provider.
- `list_compliance_frameworks`: List available compliance frameworks for each cloud provider.
- `trivy_scan_image`: Scan a container image for vulnerabilities.
- `trivy_scan_filesystem`: Scan a filesystem path or git repository for vulnerabilities
- `trivy_scan_config`: Scan IaC files (Terraform, Dockerfile, Kubernetes YAML, etc.)
- `trivy_generate_sbom`: Generate a Software Bill of Materials (SBOM) for an image.
- `searchsploit_search`: Search Exploit-DB for exploits by keyword.
- `searchsploit_examine`: Get the code/content of a specific exploit by EDB-ID.
- `list_recent_searches`: List recent exploit searches.
- `boofuzz_create_script`: Create and save a Boofuzz Python script on the server. The script should accept 'target_host' and 'target_port' as arguments or environment variables.
- `boofuzz_run_fuzzer`: Execute a saved Boofuzz fuzzer script against a target. Runs asynchronously with a timeout.
- `boofuzz_list_scripts`: List all saved fuzzer scripts.
- `boofuzz_get_results`: Retrieve the crash log or audit results from a fuzzing session.
- `dharma_generate`: Generate test cases using a Dharma grammar file located on the server.
- `dharma_generate_custom`: Generate test cases from a custom Dharma grammar provided as a string. Useful for dynamically generated grammars or quick testing without saving files.
- `masscan_scan`: Fast port scan using masscan. Can scan millions of hosts per minute.
- `masscan_top_ports`: Scan the top 20 most common ports on target(s).
- `port_scan`: Scan ports on a target host or network.
- `service_scan`: Detect service versions on target ports.
- `os_detection`: Fingerprint the operating system of the target.
- `script_scan`: Run NSE (Nmap Scripting Engine) scripts against target.
- `quick_scan`: Fast scan of the 100 most common ports with service detection.
- `whatweb_scan`: Identify web technologies, CMS, frameworks, and server software.
- `gitleaks_scan_repo`: Scan a git repository for secrets and credentials.
- `gitleaks_scan_dir`: Scan a directory for secrets without git history analysis.
- `gitleaks_detect`: Quick scan provided content (text/code) for secrets.
- `ffuf_dir`: Directory and file discovery fuzzing.
- `ffuf_vhost`: Virtual host discovery.
- `ffuf_param`: Parameter fuzzing.
- `ffuf_custom`: Custom fuzzing with full control over all options.
- `list_wordlists`: List available wordlists for fuzzing.
- `get_fuzz_results`: Retrieve results from a previous fuzzing session by scan ID.
- `nuclei_scan`: Comprehensive vulnerability scan using Nuclei templates.
- `template_scan`: Scan with specific template categories.
- `list_templates`: List available Nuclei template categories and common tags.
- `sql_scan`: Scan a URL for SQL injection vulnerabilities.
- `sql_enumerate`: Enumerate databases, tables, or columns from a vulnerable target.
- `sql_dump`: Dump data from database tables. Use responsibly and only on authorized targets.
- `sql_test`: Quick test to check if a parameter is injectable.
- `fetch_wayback_urls`: Fetch all URLs from the Wayback Machine for a given domain.
- `get_fetch_results`: Retrieve results from a previous waybackurls fetch by fetch ID.
- `list_active_fetches`: List currently running waybackurls fetches.

## Environment

- `DAML_VIEWER_LOG_LEVEL`
- `SOLAZY_LOG_LEVEL`