ExternalAttacker MCP Server
About
A modular external attack surface mapping tool integrating tools for automated reconnaissance and bug bounty workflows.
Details
- Author
- MorDavid
- GitHub stars
- 76
- Downloads
- 337
- Categories
- Other
Jump to
- Natural language interface for scanning commands
- Subdomain discovery (using subfinder)
- Port scanning (using naabu)
- HTTP service analysis (using httpx)
- CDN detection (using cdncheck)
- TLS/SSL analysis (using tlsx)
- Directory fuzzing (using ffuf, gobuster)
- DNS enumeration (using dnsx)
Setting up with Highlight
This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:
- Download and install Highlight from highlightai.com/download
- Navigate to the plugins tab and select "Add Custom Plugin"
-
Configure the plugin with the settings below
Plugin Name
ExternalAttacker MCP ServerCommand (node, npx, python, etc.)Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
- Enable "Start Automatically" if you want the plugin to start when Highlight launches
From the repository
Clone the repository, install the Python dependencies, install the required Go tools (subfinder, naabu, httpx, cdncheck, tlsx, ffuf, gobuster, dnsx), then run ExternalAttacker-App.py and access the local web interface (default port 6991). Finally, configure the MCP server in your MCP client by adding the command python <path>/ExternalAttacker-MCP.py to the mcpServers section.
Claude Desktop / Cursor
Paste into your MCP client config file to install this server.
{
"mcpServers": {
"externalattacker mcp server": {
"ExternalAttacker-MCP": {
"command": "python",
"args": [
"<Your_Path>\\ExternalAttacker-MCP.py"
]
}
}
}
}McpServers
{
"ExternalAttacker-MCP": {
"command": "python",
"args": [
"<Your_Path>\\ExternalAttacker-MCP.py"
]
}
}ExternalAttacker MCP Server
Model Context Protocol (MCP) Server for External Attack Surface Management
ExternalAttacker is a powerful integration that brings automated scanning capabilities with natural language interface for comprehensive external attack surface management and reconnaissance.
> 🔍 Automated Attack Surface Management with AI!
> Scan domains, analyze infrastructure, and discover vulnerabilities using natural language.
🔍 What is ExternalAttacker?
ExternalAttacker combines the power of:
Automated Scanning: Comprehensive toolset for external reconnaissance
Model Context Protocol (MCP): An open protocol for creating custom AI tools
Natural Language Processing: Convert plain English queries into scanning commands
📱 Community
Join our Telegram channel for updates, tips, and discussion:
- Telegram: https://t.me/root_sec
✨ Features
Natural Language Interface: Run scans using plain English
Comprehensive Scanning Categories:
🌐 Subdomain Discovery (subfinder)
🔢 Port Scanning (naabu)
🌍 HTTP Analysis (httpx)
🛡️ CDN Detection (cdncheck)
🔐 TLS Analysis (tlsx)
📁 Directory Fuzzing (ffuf, gobuster)
📝 DNS Enumeration (dnsx)
📋 Prerequisites
Python 3.8 or higher
Go (for installing tools)
MCP Client
🔧 Installation
1. Clone this repository:
git clone https://github.com/mordavid/ExternalAttacker-MCP.git
cd ExternalAttacker
2. Install Python dependencies:
pip install -r requirements.txt
3. Install required Go tools:
go install -v github.com/projectdiscovery/subfinder/v2/cmd/subfinder@latest
go install -v github.com/projectdiscovery/naabu/v2/cmd/naabu@latest
go install -v github.com/projectdiscovery/httpx/cmd/httpx@latest
go install -v github.com/projectdiscovery/cdncheck/cmd/cdncheck@latest
go install -v github.com/projectdiscovery/tlsx/cmd/tlsx@latest
go install -v github.com/ffuf/ffuf@latest
go install github.com/OJ/gobuster/v3@latest
go install -v github.com/projectdiscovery/dnsx/cmd/dnsx@latest
4. Run ExternalAttacker-App.py
python ExternalAttacker-App.py
# Access http://localhost:6991
5. Configure the MCP Server
"mcpServers": {
"ExternalAttacker-MCP": {
"command": "python",
"args": [
"<Your_Path>\\ExternalAttacker-MCP.py"
]
}
}
🚀 Usage
Example queries you can ask through the MCP:
"Scan example.com for subdomains"
"Check open ports on 192.168.1.1"
"Analyze HTTP services on test.com"
"Check if domain.com uses a CDN"
"Analyze SSL configuration of site.com"
"Fuzz endpoints on target.com"
📜 License
MIT License
🙏 Acknowledgments
The ProjectDiscovery team for their excellent security tools
- The MCP community for advancing AI-powered tooling
---
_Note: This is a security tool. Please use responsibly and only on systems you have permission to test._
Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.
