What is Secops Mcp

secops-mcp is an all-in-one security testing toolbox that integrates popular open-source tools into a single MCP interface. It is connected to an AI agent, enabling various security tasks such as penetration testing, bug bounty hunting, and threat hunting.

Use cases

Use cases for secops-mcp include conducting penetration tests on web applications, performing bug bounty hunting for identifying vulnerabilities, executing threat hunting to detect potential security threats, and utilizing various tools for comprehensive security audits.

How to use

To use secops-mcp, first ensure you have Docker installed for containerized deployment. Clone the repository, build the Docker image, and configure it with Claude Desktop by editing the claude_desktop_config.json file to include the secops-mcp command.

Key features

Key features of secops-mcp include integration with multiple security tools like Nuclei, FFuf, SQLMap, and Metasploit, providing functionalities for vulnerability scanning, web fuzzing, network discovery, and advanced password recovery, all accessible through a unified interface.

Where to use

secops-mcp can be used in various fields including cybersecurity, software development, and IT security, particularly in environments where security assessments and vulnerability testing are critical.

Security Operations Multi-Tool Platform (MCP)

A comprehensive security operations platform that integrates multiple security tools into a unified interface. This platform provides a centralized way to run various security scanning and testing tools.

Features

• Unified Interface: Single entry point for multiple security tools
• Docker Support: Easy deployment using Docker
• JSON Output: Consistent JSON output format across all tools
• Error Handling: Robust error handling and reporting
• Extensible: Easy to add new tools and functionality

Included Tools

• Nuclei: Fast and customizable vulnerability scanner
• FFUF: Fast web fuzzer and content discovery tool
• Amass: In-depth attack surface mapping and external asset discovery
• Dirsearch: Web path scanner
• Hashcat: Advanced password recovery
• HTTPX: Fast and multi-purpose HTTP toolkit
• IPInfo: IP address information gathering
• Nmap: Network exploration and security auditing
• SQLMap: Automatic SQL injection and database takeover tool
• Subfinder: Subdomain discovery tool
• TLSX: TLS/SSL scanning and analysis
• WFuzz: Web application fuzzer
• XSStrike: Advanced XSS detection and exploitation

Installation

Using Docker (Recommended)

1. Clone the repository:

   git clone https://github.com/securityfortech/secops-mcp.git
   cd secops-mcp
   

2. Build the Docker image:

   docker build -t secops-mcp .
   

3. Run the container:

   docker run -it --rm secops-mcp
   

Manual Installation

1. Clone the repository:

   git clone https://github.com/securityfortech/secops-mcp.git
   cd secops-mcp
   

2. Create and activate a virtual environment:

   python -m venv venv
   source venv/bin/activate  # On Windows: venv\Scripts\activate
   

3. Install dependencies:

   pip install -r requirements.txt
   

4. Install required tools:

   • Follow the installation instructions for each tool in the tools/ directory
   • Ensure all tools are in your system PATH

Usage

1. Start the application:

   python main.py
   

2. The application will provide a unified interface for running various security tools.

3. Each tool returns results in a consistent JSON format:

Tool Configuration

Each tool can be configured through its respective wrapper in the tools/ directory. Configuration options include:

• Output formats
• Timeouts
• Verbosity levels
• Custom wordlists
• Tool-specific parameters

Security Considerations

• This tool is for authorized security testing only
• Always obtain proper authorization before scanning systems
• Be mindful of rate limiting and scanning intensity
• Respect robots.txt and terms of service
• Use appropriate wordlists and scanning parameters

Contributing

1. Fork the repository
2. Create a feature branch
3. Commit your changes
4. Push to the branch
5. Create a Pull Request

License

This project is licensed under the MIT License - see the LICENSE file for details.

Acknowledgments

• All the security tools and their developers
• The security community for their contributions and support