MCP cover image
See in Github
2025-04-14

Un servidor de protocolo de contexto modelo (MCP) para escanear direcciones IP para vulnerabilidades. Este servidor proporciona herramientas para realizar escaneo de seguridad en IPS individuales o IP múltiples a la vez.

0

Github Watches

0

Github Forks

0

Github Stars

MCP Vulnerability Scanner

A Model Context Protocol (MCP) server for scanning IP addresses for vulnerabilities. This server provides tools to perform security scanning on individual IPs or multiple IPs at once.

Features

  • Scan IP addresses for vulnerabilities using multiple methods:
    • Nmap vulnerability scanning
    • API-based vulnerability checks
  • Supports single IP scanning or batch scanning of multiple IPs
  • Returns detailed reports with vulnerability severity, descriptions, and remediation steps
  • Implements the Model Context Protocol for easy integration with MCP clients

Prerequisites

  • Node.js (v14.x or higher)
  • npm (v7.x or higher)
  • Nmap (optional, for enhanced scanning capabilities)

Installation

  1. Clone this repository:

    git clone <repository-url>
    cd mcp-vulnerability-scanner
    
  2. Install dependencies:

    npm install
    
  3. Install Nmap (optional but recommended):

    # For Ubuntu/Debian
    sudo apt-get update
    sudo apt-get install nmap
    
    # For CentOS/RHEL
    sudo yum install nmap
    
    # For macOS
    brew install nmap
    

Configuration

The MCP Vulnerability Scanner is configured through the following files:

1. .mcp.json

This is the main MCP configuration file:

{
  "name": "vulnerability-scanner",
  "version": "1.0.0",
  "description": "An MCP server for scanning vulnerabilities on IP addresses",
  "command": "npm",
  "args": ["run", "dev"],
  "capabilities": {
    "contextItemTypes": ["ip"]
  }
}

2. Integration with VS Code

For VS Code integration, the configuration is in .vscode/mcp.json:

{
  "mcpServers": {
    "mcp_vuln": {
      "command": "npm",
      "args": [
        "run",
        "dev",
        "mcp-vulnerability-scanner",
        "--prefix",
        "/path/to/mcp-vulnerability-scanner"
      ],
      "env": {
        "MCP_SERVER_PORT": "3000"
      }
    }
  }
}

Update the --prefix path to point to your installation location.

Usage Example

Below is a example showing the vulnerability scanner in action:

  • Single Ip Addess scan

Vulnerability Scanner Screenshot

  • Multiple Ip Addess scan

Vulnerability Scanner Screenshot

Available Tools

This MCP server provides the following tools:

1. scan-ip

Scans a single IP address for vulnerabilities.

Parameters:

  • ip: The IP address to scan (string)

Example usage:

scan-ip 192.168.1.1

2. scan-multiple-ips

Scans multiple IP addresses for vulnerabilities.

Parameters:

  • ips: Array of IP addresses to scan (string[])

Example usage:

scan-multiple-ips ["192.168.1.1", "192.168.1.2", "192.168.1.3"]

Deployment Options

1. Local Development

Run the server in development mode:

npm run dev

2. Build and Run in Production

npm run build
npm start

3. Docker Deployment

Create a Dockerfile in the project root:

FROM node:18-alpine

# Install Nmap
RUN apk add --no-cache nmap

WORKDIR /app

COPY package*.json ./
RUN npm ci

COPY . .
RUN npm run build

EXPOSE 3000

CMD ["npm", "start"]

Build and run the Docker container:

docker build -t mcp-vulnerability-scanner .
docker run -p 3000:3000 mcp-vulnerability-scanner

4. VS Code Extension Integration

To use this server in VS Code:

  1. Configure the .vscode/mcp.json file as shown above
  2. Ensure the path to the server is correctly set
  3. The server will be available to MCP-enabled extensions

Security Considerations

  • This scanner requires administrative/root permissions to run comprehensive Nmap scans
  • Only scan IP addresses that you have permission to scan
  • Be aware that vulnerability scanning might trigger security systems or IDS alerts
  • The scan results are provided for informational purposes only

License

MIT

相关推荐

  • WangRongsheng
  • 🧑‍🚀 全世界最好的 llM 资料总结(数据处理、模型训练、模型部署、 O1 模型、 MCP 、小语言模型、视觉语言模型) | Resumen de los mejores recursos del mundo.

  • av
  • Ejecute sin esfuerzo LLM Backends, API, frontends y servicios con un solo comando.

  • 1Panel-dev
  • 🔥 1Panel proporciona una interfaz web intuitiva y un servidor MCP para administrar sitios web, archivos, contenedores, bases de datos y LLM en un servidor de Linux.

  • langgenius
  • alibaba
  • rulego
  • ⛓️Rulego es un marco de motor de regla de orquestación de componentes de alta generación de alto rendimiento, de alto rendimiento y de alto rendimiento para GO.

  • hkr04
  • SDK liviano C ++ MCP (Protocolo de contexto del modelo)

  • nbonamy
  • WITSY: Asistente de escritorio AI

  • evilsocket
  • El kit de desarrollo de agentes simples.

  • sigoden
  • Cree fácilmente herramientas y agentes de LLM utilizando funciones Plain Bash/JavaScript/Python.

    Reviews

    2.9 (11)
    Avatar
    user_YzS0Z4RH
    2025-04-24

    As a loyal user of the MCP Vulnerability Scanner, I am thoroughly impressed by its accuracy and efficiency. RobertoDure has developed a robust tool that quickly identifies system vulnerabilities, making it essential for proactive cybersecurity. The user-friendly interface and detailed reports are invaluable for maintaining a secure environment. Highly recommended for anyone serious about security!

    Avatar
    user_7VMQMb5i
    2025-04-24

    As a dedicated user of the mcp-vulnerability-scanner, I am highly impressed with its efficiency and accuracy. This tool, created by RobertoDure, has become indispensable for identifying and addressing security vulnerabilities. Its user-friendly interface and thorough scanning capabilities make it a must-have for any organization prioritizing cybersecurity. Highly recommend!

    Avatar
    user_yHuI9Bly
    2025-04-24

    The mcp-vulnerability-scanner by RobertoDure is an exceptional tool for identifying security vulnerabilities. It offers a user-friendly interface and thorough scanning capabilities. This scanner has helped me improve my system's security posture immensely. Highly recommended for anyone serious about cybersecurity!

    Avatar
    user_xKfPl572
    2025-04-24

    As a loyal user of the mcp-vulnerability-scanner, I must say it has significantly enhanced our security protocols. Developed by RobertoDure, this tool is incredibly intuitive and efficient in identifying vulnerabilities. It's user-friendly and effective, which makes the scanning process seamless. Highly recommend for anyone looking to strengthen their security measures!

    Avatar
    user_j5lgP3at
    2025-04-24

    As a loyal user of MCP applications, I must say that mcp-vulnerability-scanner by RobertoDure is an exceptional tool for identifying security weaknesses. It effortlessly scans and detects vulnerabilities, ensuring that systems remain secure and protected. Its user-friendly interface and thorough reporting make it an invaluable asset for both newcomers and seasoned professionals in cybersecurity. Highly recommend!

    Avatar
    user_cWZWuaGv
    2025-04-24

    The mcp-vulnerability-scanner by RobertoDure is an exceptional tool for identifying potential security threats. Its user-friendly interface and accurate scanning capabilities make it a must-have for anyone serious about maintaining system security. Highly recommend!

    Avatar
    user_V1ZcwTjU
    2025-04-24

    The mcp-vulnerability-scanner by RobertoDure is an exceptional tool for safeguarding your systems. It efficiently detects vulnerabilities, ensuring that potential threats are identified and addressed promptly. The user-friendly interface and thorough scanning capabilities make it an indispensable asset for maintaining robust security. Highly recommended for anyone serious about protecting their digital environment.

    Avatar
    user_fEANqnGs
    2025-04-24

    As an avid user of mcp-vulnerability-scanner, I am highly impressed with its efficiency and accuracy in identifying vulnerabilities. RobertoDure did an outstanding job creating this tool. It offers a user-friendly interface and seamless experience. Highly recommended for anyone serious about security!

    Avatar
    user_Auq9tgnw
    2025-04-24

    I recently started using the mcp-vulnerability-scanner by RobertoDure, and it has exceeded my expectations. The ease of use and comprehensive scanning capabilities make it an essential tool for anyone serious about security. It's efficient at identifying vulnerabilities and providing clear reports, which have significantly improved our system’s protection. Highly recommended for anyone in need of a reliable vulnerability scanner!

    Avatar
    user_hXOoTBIl
    2025-04-24

    The mcp-vulnerability-scanner by RobertoDure is an impressive tool for identifying security weaknesses. It provides an intuitive interface and comprehensive scanning capabilities that make it essential for any security professional. The detailed reports and easy-to-understand results enhance our ability to mitigate risks effectively. Highly recommended for anyone serious about cybersecurity!

    Avatar
    user_PjL88S6a
    2025-04-24

    I've been using the mcp-vulnerability-scanner for a while now, and it has become an invaluable tool for ensuring the security of my applications. Created by RobertoDure, this scanner is incredibly reliable and efficient. It quickly identifies vulnerabilities, allowing me to address them before they become major issues. Highly recommend for any developer serious about application security!