Pentest MCP

Findings (3)

• lowLow. Minor, or common in normal tools. Shown for information.
  vite@6.4.4: 1 known vulnerability

  GHSA-8g5g-mxqh-grgj

  site/package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  package.json has a prepare script

  npm run build

  package.json
• lowLow. Minor, or common in normal tools. Shown for information.
  No manifest declaring network access and environment variables (agent.json)

Network activity

Tools exposed (36)

• getRuntimeStatus

  Read installed tool capabilities and execution policy without launching assessments.

• createEngagement

  Create an explicitly authorized, time bounded engagement with allowed and excluded targets.

• getEngagement

  Read the scope and status of an engagement owned by this operator.

• listEngagements

  List engagements belonging to the authenticated operator.

• closeEngagement

  Close an owned engagement and cancel its active assessment commands.

• nmapScan

  Run an Nmap scan to discover hosts and services. Use this before other tools to identify attack surface. Options map directly to Nmap flags. Note that SYN scans or OS detection (e.g. `-sS`, `-O`) require elevated privileges. Example: `{"target":"192.168.1.0/24", "scanTechnique":"SYN", "serviceVersio

• generateWordlist

  Generate a custom password wordlist from target-related words. Use this before running John the Ripper. Example: `{"baseWords":["Acme","Smith"],"dates":["1984"],"customPatterns":["!"]}`

• runJohnTheRipper

  Crack supplied hashes in an active local engagement. Only format and approved wordlist options are permitted; code, configuration and output overrides are disabled.

• runHashcat

  Crack supplied hashes in an active local engagement using typed parameters and approved input files. Sessions, restore, loopback and caller output paths are disabled.

• listActiveScans

  List running scans owned by this operator within the specified engagement.

• cancelScan

  Stop an Nmap scan listed by listActiveScans for this engagement.

• saveAssessmentPlan

  Save the operator approved assessment plan and exact tool allowlist for this engagement.

• getAssessmentPlan

  Read the current operator approved assessment plan for this owned engagement.

• listAgentProfiles

  List operator configured model profiles available for an approved assessment.

• runAgentAssessment

  Run an operator approved assessment plan within its engagement scope and tool allowlist.

• reconcileAgentAssessment

  Reconcile a previously started assessment run owned by this operator.

• recordResearchActivity

  Record research evidence or an analyst verified finding for an owned engagement.

• draftAssessmentReport

  Draft a report from recorded assessment evidence for operator review.

• listAgentReportDrafts

  List report drafts for an engagement owned by this operator.

• getAgentReportDraft

  Read a report draft within an engagement owned by this operator.

• publishAgentReport

  Publish an analyst reviewed report draft into the engagement report store.

• listEngagementRecords

  List captured engagement records so reports can be assembled without manual copy/paste.

• getEngagementRecord

  Fetch a single engagement record by ID.

• createClientReport

  Create an analyst reviewed client report from evidence in an owned engagement.

• listClientReports

  List stored client reports belonging to this operator.

• getClientReport

  Read a stored client report belonging to this operator.

• gobuster

  Enumerate hidden directories and files on a web server. Run this after confirming the target hosts a web service. Provide a wordlist and optional extensions. Example: `{"target":"http://example.com", "wordlist":"/usr/share/wordlists/common.txt"}`

• nikto

  Scan a web server for common vulnerabilities with Nikto. Use after identifying a live site. Some checks may be noisy. Example: `{"target":"http://192.168.1.10", "ssl":true, "port":"443"}`

• subfinderEnum

  Enumerate subdomains for a target domain using subfinder.

• httpxProbe

  Probe hosts with httpx and return live web endpoints.

• ffufScan

  Run ffuf for web content discovery and fuzzing.

• nucleiScan

  Run nuclei template scanning against target endpoints.

• trafficCapture

  Capture traffic packets for reconnaissance/evidence collection.

• hydraBruteforce

  Run brute-force authentication checks with Hydra.

• privEscAudit

  Run local privilege-escalation audit checks and summarize potential escalation paths.

• extractionSweep

  Run SQL injection extraction workflow with sqlmap.