pentest-mcp-server

Overview

The pentest-mcp-server is a sophisticated MCP server built for penetration testing, offering persistent session management through tmux for complex, multi-step security assessments. Unlike other MCP servers that execute commands independently, this solution maintains state across disconnections and network failures, enabling long-running operations with tools like Metasploit, reverse shells, and custom exploits. The server includes intelligent automation features, auto-reconnection capabilities, and smart resource management to handle concurrent heavy operations efficiently.

Try asking AI

After installing, here are 5 things you can ask your AI assistant:

• create_session

  Create a new persistent tmux session for isolated pentesting operations

  Try:Create a new session called web_scanTry:Start a persistent session for penetration testing
• list_sessions

  List all active tmux sessions and their status

  Try:Show all active sessionsTry:List my current pentesting sessions
• kill_session

  Terminate a specific session and clean up resources

  Try:End the nmap_scan sessionTry:Terminate my old session scan1
• execute

  Execute commands in persistent sessions

  Try:Run nmap -sV 192.168.1.0/24Try:Execute msfconsole in my session
• read_output

  Get current output from a session

  Try:Show me the output from my scanTry:Get the latest command output
• send_input

  Send input to interactive tools

  Try:Enter 'use exploit/multi/handler' in msfconsoleTry:Send 'whoami' to the shell
• get_system_status

  Get system resource usage and session status

  Try:Check system resourcesTry:Show me current session status
• recover_sessions

  Recover orphaned sessions after reconnection

  Try:Restore my sessions after connection lossTry:Recover all tmux sessions
• upload_file

  Upload files to your system via SFTP

  Try:Upload exploit.py to /tmpTry:Send this file to the target system
• download_file

  Download files from your system via SFTP

  Try:Get the scan results.xml fileTry:Download /tmp/scan_results to my local machine
• parse_tool_output

  Parse common pentest tool outputs (nmap XML, JSON, etc.)

  Try:Parse the nmap scan resultsTry:Extract vulnerabilities from the XML report

Comparable tools

Installation

git clone https://github.com/LayeSec006/pentest-mcp-server.git
cd pentest-mcp-server
pip install -e .

cp .env.example .env
# Edit .env with your target system details

ssh kali@<TARGET_HOST>
sudo apt update && sudo apt install tmux  # For Debian/Ubuntu/Kali
sudo pacman -S tmux  # For Arch/BlackArch
sudo dnf install tmux  # For Fedora
exit

python -m pytest tests/ -v

{
  "mcpServers": {
    "pentest-mcp": {
      "command": "python",
      "args": ["-m", "pentest_mcp_server"],
      "env": {
        "TARGET_HOST": "192.168.1.100",
        "TARGET_USER": "kali",
        "TARGET_PASSWORD": "your_password"
      }
    }
  }
}

FAQ

What makes this MCP server different from others?

This server provides persistent session management through tmux, enabling complex multi-step workflows and interactive tool support that survives disconnections and crashes.

What Linux distributions are supported?

It works with ANY Linux distribution including Kali Linux, Parrot Security, BackBox, Ubuntu, Debian, Arch, RHEL, CentOS, Fedora, and Alpine Linux.

Compare pentest-mcp-server with