← MCP Security Catalog

operant-mcp 1.1.0

npm · operant-mcp · latest release

Scan failed
Security result
62
Observed tools
64
Version rating
100
Change risk

Independent inventory

Observed 2026-08-17T11:48:58.319Z using mcpSecurity-inventory. Protocol 2025-06-18.

ToolCategoryRisk
auth_bruteforceUsername enumeration and credential brute-force. First enumerates valid usernames (if failure messages differ), then brute-forces passwords against confirmed usernames. Returns: {"username_enumeration": [{"username": str, "exists": bool}], "valid_credentials": [{"username": str, "password": str}], "requests_sent": int}. Side effects: Sends login requests. May trigger account lockout. Errors: Rate limiting may block requests. Use realistic credentials to avoid WAF detection.
Input schema
{
  "type": "object",
  "properties": {
    "url": {
      "type": "string",
      "description": "Login form URL"
    },
    "usernames": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "minItems": 1,
      "maxItems": 50,
      "description": "Usernames to test"
    },
    "passwords": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "minItems": 1,
      "maxItems": 100,
      "description": "Passwords to test"
    },
    "username_field": {
      "type": "string",
      "description": "Form field name for username"
    },
    "password_field": {
      "type": "string",
      "description": "Form field name for password"
    },
    "method": {
      "type": "string",
      "enum": [
        "POST",
        "GET"
      ],
      "description": "HTTP method"
    },
    "success_indicator": {
      "type": "string",
      "description": "String in response that indicates success (e.g. 'dashboard', 'welcome')"
    },
    "failure_indicator": {
      "type": "string",
      "description": "String in response that indicates failure (e.g. 'invalid', 'incorrect')"
    },
    "content_type": {
      "type": "string",
      "enum": [
        "form",
        "json"
      ],
      "description": "Request content type"
    },
    "concurrent": {
      "type": "number",
      "minimum": 1,
      "maximum": 10,
      "description": "Concurrent requests"
    }
  },
  "required": [
    "url",
    "usernames",
    "passwords"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
auth_cookie_tamperTest cookie manipulation for privilege escalation. Sends requests with tampered cookie values and checks for access. Returns: {"results": [{"cookies": dict, "status": int, "length": int, "response_snippet": str}]}. Side effects: Sends GET requests with manipulated cookies.
Input schema
{
  "type": "object",
  "properties": {
    "url": {
      "type": "string",
      "description": "URL to test with tampered cookies (e.g. /dashboard, /admin)"
    },
    "cookies": {
      "type": "object",
      "additionalProperties": {
        "type": "string"
      },
      "description": "Cookie name-value pairs to send, e.g. {\"logged_in\": \"true\", \"admin\": \"1\"}"
    }
  },
  "required": [
    "url",
    "cookies"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
auth_csrf_extractExtract CSRF tokens from HTML forms. Searches for the token in hidden input fields, meta tags, and script blocks. Returns: {"tokens_found": [{"source": str, "value": str}], "cookies": [str]}. Side effects: Single GET request.
Input schema
{
  "type": "object",
  "properties": {
    "url": {
      "type": "string",
      "description": "URL of the form page containing CSRF token"
    },
    "token_name": {
      "type": "string",
      "description": "CSRF token field name to search for"
    }
  },
  "required": [
    "url"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
clickjacking_testCheck X-Frame-Options and CSP frame-ancestors headers; generate PoC iframe HTML. Fetches response headers and checks for framing protections. If protections are missing, generates a ready-to-use PoC HTML page that embeds the target in a transparent iframe with a decoy button overlay. Returns: {headers, x_frame_options, csp_frame_ancestors, vulnerable, poc_html}. Side effects: Single HEAD/GET request.
Input schema
{
  "type": "object",
  "properties": {
    "target_url": {
      "type": "string",
      "description": "URL to test for clickjacking vulnerability, e.g. https://target/my-account"
    }
  },
  "required": [
    "target_url"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
cloudtrail_analyzeParse and analyze AWS CloudTrail logs. Extracts event timeline, unique users, event types, and source IPs. Returns: {"event_count": int, "unique_users": [str], "event_types": [str], "source_ips": [str], "timeline": str}. Side effects: Read-only file analysis. Requires jq.
Input schema
{
  "type": "object",
  "properties": {
    "log_dir": {
      "type": "string",
      "description": "Directory containing CloudTrail JSON log files"
    }
  },
  "required": [
    "log_dir"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
cloudtrail_find_anomaliesFind anomalies in CloudTrail logs: non-AWS IPs, unusual API calls, role assumptions. Returns: {"non_aws_ips": [str], "unusual_events": [str], "role_assumptions": [str], "data_exfil_indicators": [str]}. Side effects: Read-only file analysis.
Input schema
{
  "type": "object",
  "properties": {
    "log_dir": {
      "type": "string",
      "description": "Directory containing CloudTrail JSON log files"
    }
  },
  "required": [
    "log_dir"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
cmdi_blind_detectDetect blind command injection via time delay and OOB callbacks. Tests sleep-based delay detection and optional out-of-band (curl/nslookup to callback). Returns time_based results array and oob_payloads list. Side effects: Executes sleep on target if vulnerable. OOB payloads call back to callback_url.
Input schema
{
  "type": "object",
  "properties": {
    "url": {
      "type": "string",
      "description": "Target URL"
    },
    "parameter": {
      "type": "string",
      "description": "Vulnerable parameter name"
    },
    "base_value": {
      "type": "string",
      "description": "Legitimate parameter value"
    },
    "method": {
      "type": "string",
      "enum": [
        "GET",
        "POST"
      ],
      "description": "HTTP method"
    },
    "callback_url": {
      "type": "string",
      "description": "Out-of-band callback URL for OOB detection (e.g. Burp Collaborator)"
    },
    "delay_seconds": {
      "type": "number",
      "minimum": 1,
      "maximum": 10,
      "description": "Sleep duration for time-based detection"
    }
  },
  "required": [
    "url",
    "parameter"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
cmdi_testTest command injection using various shell operators. Tests ;, &&, ||, |, backtick, $(), and %0a (newline) operators with 'id' and 'whoami' as detection commands. Returns results array with operator, payload, status, output_snippet, likely_vulnerable. Side effects: Read-only detection commands (id, whoami). Sends ~14 requests.
Input schema
{
  "type": "object",
  "properties": {
    "url": {
      "type": "string",
      "description": "Target URL that processes the parameter server-side"
    },
    "parameter": {
      "type": "string",
      "description": "Vulnerable parameter name, e.g. 'storeId'"
    },
    "base_value": {
      "type": "string",
      "description": "Legitimate value for the parameter, e.g. '1'"
    },
    "method": {
      "type": "string",
      "enum": [
        "GET",
        "POST"
      ],
      "description": "HTTP method"
    },
    "operators": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Injection operators to test. Default: all common operators."
    }
  },
  "required": [
    "url",
    "parameter"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
cors_testTest CORS misconfigurations: origin reflection, null origin trust, subdomain wildcards. Sends requests with various Origin headers and checks Access-Control-Allow-Origin and Access-Control-Allow-Credentials in the response. Misconfigurations allow attacker sites to read authenticated API responses. Returns: {results: [{test, origin_sent, acao, acac, vulnerable}], exploit_html}. Side effects: Read-only requests with custom Origin headers. Sends ~8 requests.
Input schema
{
  "type": "object",
  "properties": {
    "url": {
      "type": "string",
      "description": "Base URL of the target application, e.g. https://target.com"
    },
    "api_endpoint": {
      "type": "string",
      "description": "API endpoint to test CORS on, e.g. /api/account or /api/users/me"
    },
    "auth_cookie": {
      "type": "string",
      "description": "Session cookie to include for authenticated CORS tests"
    }
  },
  "required": [
    "url",
    "api_endpoint"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
coupon_abuse_testTest coupon stacking and alternation bypass. Tests each coupon individually, then alternates between coupons to see if discounts compound past the intended limit. Returns: {"individual_results": [...], "stacking_results": [...], "stacking_possible": bool}. Side effects: Applies coupons to the cart. May modify cart totals.
Input schema
{
  "type": "object",
  "properties": {
    "url": {
      "type": "string",
      "description": "Coupon application endpoint URL"
    },
    "coupon_endpoint": {
      "type": "string",
      "description": "Full URL for applying coupons, e.g. https://target/cart/coupon"
    },
    "coupons": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "minItems": 1,
      "maxItems": 20,
      "description": "Coupon codes to test, e.g. ['NEWCUST5', 'SIGNUP30', 'FREESHIP']"
    },
    "coupon_param": {
      "type": "string",
      "description": "Form parameter name for the coupon code"
    },
    "auth_cookie": {
      "type": "string",
      "description": "Session cookie for authenticated requests"
    },
    "stacking_rounds": {
      "type": "number",
      "minimum": 1,
      "maximum": 20,
      "description": "Number of alternation rounds to test for coupon stacking"
    }
  },
  "required": [
    "url",
    "coupon_endpoint",
    "coupons"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
deserialization_testDetect and manipulate serialized objects in cookies. Analyzes cookie values for serialization patterns (PHP serialize, Java, .NET ViewState, base64-encoded JSON). If a serialized format is detected, attempts privilege escalation by modifying fields (admin=1, role=admin). Returns: {detection: {format, decoded, fields}, manipulation_results: [...]}. Side effects: Sends requests with modified cookies. May escalate privileges if successful.
Input schema
{
  "type": "object",
  "properties": {
    "url": {
      "type": "string",
      "description": "Target URL to test, e.g. https://target/my-account"
    },
    "cookie_name": {
      "type": "string",
      "description": "Cookie name that may contain serialized data, e.g. 'session', 'user', 'data'"
    },
    "cookie_value": {
      "type": "string",
      "description": "Current cookie value to analyze. If not provided, fetches from the target URL"
    },
    "auth_cookie": {
      "type": "string",
      "description": "Additional auth cookies to send, e.g. 'session=abc123'"
    }
  },
  "required": [
    "url",
    "cookie_name"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
ffuf_fuzzDirectory and parameter fuzzing with ffuf. Target URL must contain 'FUZZ' keyword where the wordlist values are injected. Returns discovered paths/parameters with status codes and sizes.
Input schema
{
  "type": "object",
  "properties": {
    "target_url": {
      "type": "string",
      "description": "Target URL with FUZZ keyword, e.g. https://example.com/FUZZ"
    },
    "wordlist": {
      "type": "string",
      "description": "Wordlist path, or 'common' for built-in SecLists common.txt (default: common)"
    },
    "method": {
      "type": "string",
      "enum": [
        "GET",
        "POST"
      ],
      "default": "GET",
      "description": "HTTP method"
    },
    "match_codes": {
      "type": "string",
      "default": "200,301,302,307,401,403",
      "description": "Comma-separated HTTP status codes to match"
    },
    "filter_size": {
      "type": "string",
      "description": "Filter out responses of this size (comma-separated)"
    },
    "headers": {
      "type": "object",
      "additionalProperties": {
        "type": "string"
      },
      "description": "Additional headers as key-value pairs"
    },
    "rate_limit": {
      "type": "number",
      "description": "Requests per second limit"
    },
    "extra_args": {
      "type": "string",
      "description": "Additional ffuf CLI arguments"
    }
  },
  "required": [
    "target_url"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
file_upload_testTest web shell upload with Content-Type bypass variants. Attempts to upload a PHP web shell using various techniques: 1) Direct .php upload 2) .php with image/jpeg Content-Type (Content-Type bypass) 3) Alternative extensions (.php5, .phtml, .phar, .php7, .phps) 4) Double extension (.php.jpg) 5) Null byte (.php%00.jpg). After each upload, attempts to access the uploaded file to check execution. Returns: {results: [{technique, upload_status, execution_status, output, successful}]}. Side effects: Uploads files to the server. May achieve remote code execution.
Input schema
{
  "type": "object",
  "properties": {
    "url": {
      "type": "string",
      "description": "Base URL of the target application, e.g. https://target.com"
    },
    "upload_endpoint": {
      "type": "string",
      "description": "Upload endpoint path, e.g. /my-account/avatar or /api/upload"
    },
    "upload_field": {
      "type": "string",
      "description": "Form field name for the file upload, e.g. 'avatar', 'file', 'upload'",
      "default": "file"
    },
    "upload_path_prefix": {
      "type": "string",
      "description": "Path where uploaded files are accessible, e.g. /files/avatars/",
      "default": "/files/avatars/"
    },
    "auth_cookie": {
      "type": "string",
      "description": "Session cookie for authenticated uploads"
    },
    "shell_command": {
      "type": "string",
      "description": "Command the PHP shell should execute",
      "default": "id"
    },
    "extra_fields": {
      "type": "string",
      "description": "Additional form fields, e.g. 'user=test&csrf=abc123'"
    }
  },
  "required": [
    "url",
    "upload_endpoint"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
frame_buster_bypassTest sandbox attribute bypass for JavaScript frame busters. Generates PoC HTML that uses iframe sandbox='allow-forms' to disable JavaScript execution (neutralizing frame-busting code) while still allowing form submission for clickjacking. Also checks if the target page contains common frame-busting patterns. Returns: {frame_buster_detected, patterns_found, sandbox_poc_html}. Side effects: Single GET request to detect frame-busting code.
Input schema
{
  "type": "object",
  "properties": {
    "target_url": {
      "type": "string",
      "description": "URL that uses JavaScript frame-busting code"
    }
  },
  "required": [
    "target_url"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
graphql_find_hiddenFind hidden/undocumented fields on a GraphQL type using field suggestion errors. Sends queries with intentionally misspelled field names to trigger GraphQL's field suggestion feature, which reveals valid field names. Also tries common sensitive field names directly. Returns: {discovered_fields: [str], suggestion_results: [...], direct_probe_results: [...]}. Side effects: Read-only POST requests. Sends ~25 requests.
Input schema
{
  "type": "object",
  "properties": {
    "url": {
      "type": "string",
      "description": "GraphQL endpoint URL"
    },
    "type_name": {
      "type": "string",
      "description": "GraphQL type to probe for hidden fields, e.g. 'User', 'Post', 'BlogPost'"
    },
    "known_field": {
      "type": "string",
      "description": "A known field on this type to use in queries, e.g. 'id' or 'title'",
      "default": "id"
    },
    "query_name": {
      "type": "string",
      "description": "Query name to use for fetching objects, e.g. 'getUser' or 'getBlogPost'"
    },
    "query_arg": {
      "type": "string",
      "description": "Query argument, e.g. 'id: 1' or 'slug: \"test\"'"
    },
    "auth_header": {
      "type": "string",
      "description": "Authorization header value"
    },
    "auth_cookie": {
      "type": "string",
      "description": "Session cookie"
    }
  },
  "required": [
    "url",
    "type_name"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
graphql_introspectRun introspection query to enumerate all types, fields, and mutations. Sends the standard GraphQL introspection query (__schema) to discover the full API schema including hidden/undocumented fields, mutations, and types. Returns: {introspection_enabled, types: [{name, kind, fields: [str]}], mutations: [str], queries: [str]}. Side effects: Single POST request. Read-only.
Input schema
{
  "type": "object",
  "properties": {
    "url": {
      "type": "string",
      "description": "GraphQL endpoint URL, e.g. https://target/graphql or https://target/api"
    },
    "auth_header": {
      "type": "string",
      "description": "Authorization header value, e.g. 'Bearer abc123'"
    },
    "auth_cookie": {
      "type": "string",
      "description": "Session cookie for authenticated requests"
    }
  },
  "required": [
    "url"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
idor_testTest Insecure Direct Object References by iterating through IDs/GUIDs. Sends requests with each ID and compares response status codes and lengths. Differing responses suggest IDOR — the server returns data for other users' objects without proper authorization checks. Returns: {"baseline": dict, "results": [{"id": str, "status": int, "length": int, "different": bool, "snippet": str}], "idor_candidates": [str]}. Side effects: Read-only requests. Sends len(id_list) + 1 requests. Errors: ConnectionError if target unreachable.
Input schema
{
  "type": "object",
  "properties": {
    "url": {
      "type": "string",
      "description": "URL with ID parameter, e.g. https://target/my-account?id=123 or https://target/api/users/123"
    },
    "parameter": {
      "type": "string",
      "description": "Parameter name containing the ID, e.g. 'id'. Use '__path__' if the ID is in the URL path"
    },
    "id_list": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "minItems": 1,
      "maxItems": 50,
      "description": "List of IDs/GUIDs to test, e.g. ['1','2','3'] or ['abc-def-123', 'ghi-jkl-456']"
    },
    "auth_cookie": {
      "type": "string",
      "description": "Session cookie to send (e.g. 'session=abc123'). If None, tests without auth"
    },
    "method": {
      "type": "string",
      "description": "HTTP method to use"
    }
  },
  "required": [
    "url",
    "parameter",
    "id_list"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
maldoc_analyzeFull malware document analysis pipeline. 1. oledump.py — list OLE streams, identify macro-containing streams (marked 'M') 2. olevba — extract VBA macro code 3. Identify auto-execution triggers (Document_open, AutoOpen, Workbook_Open) 4. Look for obfuscation patterns and base64 payloads 5. Search for PowerShell, WMI, and shell execution indicators Returns: {"ole_streams": str, "vba_macros": str, "auto_exec_triggers": [str], "suspicious_strings": [str], "iocs": [str]}. Side effects: Read-only file analysis. Does NOT execute any payloads. Errors: Requires oledump.py and olevba (pip install oletools).
Input schema
{
  "type": "object",
  "properties": {
    "file_path": {
      "type": "string",
      "description": "Path to the suspicious OLE document (.doc, .xls, .bin)"
    }
  },
  "required": [
    "file_path"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
maldoc_extract_macrosExtract raw VBA macros from an OLE document. Returns: {"macros": str, "stream_count": int, "macro_streams": [str]}. Side effects: Read-only file analysis.
Input schema
{
  "type": "object",
  "properties": {
    "file_path": {
      "type": "string",
      "description": "Path to the OLE document"
    }
  },
  "required": [
    "file_path"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
memory_detect_rootkitCheck for rootkits via syscall table tampering and hidden kernel modules. Runs linux_check_syscall and linux_hidden_modules plugins. Returns syscall_check, hidden_modules, rootkit_indicators, and likely_compromised. Read-only analysis.
Input schema
{
  "type": "object",
  "properties": {
    "dump_path": {
      "type": "string",
      "description": "Path to the Linux memory dump file"
    },
    "profile": {
      "type": "string",
      "description": "Volatility 2 profile name"
    }
  },
  "required": [
    "dump_path",
    "profile"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
nosqli_auth_bypassTest NoSQL operator injection ($ne, $gt, $regex) for authentication bypass. Sends payloads that abuse MongoDB query operators to bypass password checks. E.g., {"username":"admin","password":{"$ne":""}} matches any non-empty password. Returns: {results: [{payload_name, status, length, likely_bypass, snippet}]}. Side effects: Sends POST requests to the login endpoint. May create sessions.
Input schema
{
  "type": "object",
  "properties": {
    "url": {
      "type": "string",
      "description": "Login endpoint URL, e.g. https://target/login or https://target/api/auth"
    },
    "username_param": {
      "type": "string",
      "description": "JSON field name for username, e.g. 'username' or 'email'",
      "default": "username"
    },
    "password_param": {
      "type": "string",
      "description": "JSON field name for password",
      "default": "password"
    },
    "target_username": {
      "type": "string",
      "description": "Username to bypass auth for, e.g. 'admin'",
      "default": "admin"
    }
  },
  "required": [
    "url"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
nosqli_detectTest NoSQL injection detection in query parameters. Tests MongoDB operator injection ($ne, $gt, $regex, $where) in GET parameters and JSON body to detect NoSQL injection points. Returns: {baseline, results: [{payload_name, status, length, different}], injectable}. Side effects: Read-only. Sends ~10 requests.
Input schema
{
  "type": "object",
  "properties": {
    "url": {
      "type": "string",
      "description": "URL with query parameter to test, e.g. https://target/api/products?category=Gifts"
    },
    "parameter": {
      "type": "string",
      "description": "Parameter name to test for NoSQL injection"
    },
    "method": {
      "type": "string",
      "enum": [
        "GET",
        "POST"
      ],
      "description": "HTTP method",
      "default": "GET"
    },
    "content_type": {
      "type": "string",
      "enum": [
        "query",
        "json"
      ],
      "description": "'query' for URL params, 'json' for JSON body",
      "default": "query"
    }
  },
  "required": [
    "url",
    "parameter"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
nuclei_scanRun nuclei vulnerability scanner against a target. Supports template IDs, tags (cve, xss, sqli, etc.), and severity filtering. Returns array of findings in JSON format. Side effects: Sends multiple HTTP requests to target based on templates.
Input schema
{
  "type": "object",
  "properties": {
    "target_url": {
      "type": "string",
      "description": "Target URL to scan, e.g. https://example.com"
    },
    "templates": {
      "type": "string",
      "description": "Comma-separated template IDs or tags, e.g. 'cve,xss,sqli' or 'CVE-2021-44228'"
    },
    "severity": {
      "type": "string",
      "description": "Comma-separated severity filter, e.g. 'critical,high,medium'"
    },
    "rate_limit": {
      "type": "number",
      "description": "Max requests per second (default 150)"
    },
    "extra_args": {
      "type": "string",
      "description": "Additional nuclei CLI arguments"
    }
  },
  "required": [
    "target_url"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
oob_generate_payloadGenerate category-specific out-of-band payloads using an OAST domain. Supports: sqli_oracle, sqli_mssql, sqli_mysql, xxe, ssrf, cmdi, ldap. Returns ready-to-use payload strings.
Input schema
{
  "type": "object",
  "properties": {
    "domain": {
      "type": "string",
      "description": "The OAST domain from oob_start_listener, e.g. abc123.oast.fun"
    },
    "attack_type": {
      "type": "string",
      "enum": [
        "sqli_oracle",
        "sqli_mssql",
        "sqli_mysql",
        "xxe",
        "ssrf",
        "cmdi",
        "ldap"
      ],
      "description": "Type of attack payload to generate"
    }
  },
  "required": [
    "domain",
    "attack_type"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
oob_poll_interactionsRead the interactsh JSON output file for new OOB interactions. Returns array of interactions with type, remote_address, raw_request, and timestamp.
Input schema
{
  "type": "object",
  "properties": {
    "session_file": {
      "type": "string",
      "description": "Path to the interactsh JSON output file from oob_start_listener"
    }
  },
  "required": [
    "session_file"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
oob_start_listenerStart an interactsh-client listener in the background. Returns the unique OAST domain and session file path for polling interactions later. Side effects: Spawns a background interactsh-client process writing JSON to /tmp.
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {}
}
——
param_discoverDiscover hidden parameters on a URL using arjun. Sends requests with parameter wordlists to detect reflected or functional parameters. Returns list of discovered parameter names.
Input schema
{
  "type": "object",
  "properties": {
    "target_url": {
      "type": "string",
      "description": "Target URL to discover parameters on"
    },
    "method": {
      "type": "string",
      "enum": [
        "GET",
        "POST"
      ],
      "default": "GET",
      "description": "HTTP method"
    },
    "extra_args": {
      "type": "string",
      "description": "Additional arjun CLI arguments"
    }
  },
  "required": [
    "target_url"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
path_traversal_testTest path traversal with encoding variants at multiple depths. Tries plain ../, URL-encoded %2e%2e/, double-encoded %252e%252e/, and null-byte/truncation bypasses. Returns results array with payload, status, length, contains_target per attempt, and vulnerable_payloads list. Side effects: Read-only GET requests. Sends ~32 requests.
Input schema
{
  "type": "object",
  "properties": {
    "url": {
      "type": "string",
      "description": "URL with file parameter, e.g. https://target/image?filename=photo.jpg"
    },
    "parameter": {
      "type": "string",
      "description": "Parameter that accepts filenames"
    },
    "target_file": {
      "type": "string",
      "description": "Server file to attempt reading"
    },
    "depth": {
      "type": "number",
      "minimum": 1,
      "maximum": 12,
      "description": "Maximum directory traversal depth"
    }
  },
  "required": [
    "url",
    "parameter"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
pcap_detect_scanDetect port scans by analyzing SYN packets without ACK. Returns scanners (ip + syn_count), top_scanned_ports, and a hint. Read-only file analysis.
Input schema
{
  "type": "object",
  "properties": {
    "pcap_path": {
      "type": "string",
      "description": "Path to the PCAP file"
    }
  },
  "required": [
    "pcap_path"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
pcap_dns_analysisExtract and analyze DNS queries from a PCAP. Returns dns_queries_by_frequency, dns_servers, and ipv6_dns_endpoints. Read-only file analysis.
Input schema
{
  "type": "object",
  "properties": {
    "pcap_path": {
      "type": "string",
      "description": "Path to the PCAP file"
    },
    "source_ip": {
      "type": "string",
      "description": "Filter DNS queries from a specific source IP"
    }
  },
  "required": [
    "pcap_path"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
pcap_extract_credentialsExtract credentials from FTP, HTTP, and SMTP traffic. Returns ftp_credentials, http_authorization_headers, http_post_data, and smtp_data. Read-only, may contain sensitive credentials.
Input schema
{
  "type": "object",
  "properties": {
    "pcap_path": {
      "type": "string",
      "description": "Path to the PCAP file"
    },
    "protocol": {
      "type": "string",
      "enum": [
        "ftp",
        "http",
        "smtp",
        "all"
      ],
      "description": "Protocol to extract credentials from",
      "default": "all"
    }
  },
  "required": [
    "pcap_path"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
pcap_follow_streamFollow a TCP/UDP/HTTP stream in a PCAP. Returns stream_content, stream_num, and protocol. Read-only file analysis.
Input schema
{
  "type": "object",
  "properties": {
    "pcap_path": {
      "type": "string",
      "description": "Path to the PCAP file"
    },
    "stream_num": {
      "type": "number",
      "minimum": 0,
      "description": "TCP stream number to follow"
    },
    "protocol": {
      "type": "string",
      "enum": [
        "tcp",
        "udp",
        "http"
      ],
      "description": "Stream protocol",
      "default": "tcp"
    }
  },
  "required": [
    "pcap_path",
    "stream_num"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
pcap_http_objectsExport HTTP objects (files) from a PCAP to a directory. Returns exported_count, output_dir, files list, and tshark_output. Creates files in the output directory.
Input schema
{
  "type": "object",
  "properties": {
    "pcap_path": {
      "type": "string",
      "description": "Path to the PCAP file"
    },
    "output_dir": {
      "type": "string",
      "description": "Directory to export HTTP objects to"
    }
  },
  "required": [
    "pcap_path",
    "output_dir"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
pcap_llmnr_ntlmDetect LLMNR poisoning and extract NTLM credentials from SMB. Returns llmnr_queries, ntlm_auth_entries, counts, and poisoning_indicators. Read-only file analysis.
Input schema
{
  "type": "object",
  "properties": {
    "pcap_path": {
      "type": "string",
      "description": "Path to the PCAP file"
    }
  },
  "required": [
    "pcap_path"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
pcap_overviewGet protocol hierarchy and endpoint statistics from a PCAP. Returns protocol_hierarchy, endpoints, packet_count, and capture_info. Read-only file analysis, no network access.
Input schema
{
  "type": "object",
  "properties": {
    "pcap_path": {
      "type": "string",
      "description": "Path to the PCAP file"
    }
  },
  "required": [
    "pcap_path"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
pcap_tls_analysisAnalyze TLS handshakes, SNI values, and certificate data in a PCAP. Returns sni_values, tls_versions, server_ephemeral_keys, and client_randoms. Read-only file analysis.
Input schema
{
  "type": "object",
  "properties": {
    "pcap_path": {
      "type": "string",
      "description": "Path to the PCAP file"
    }
  },
  "required": [
    "pcap_path"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
price_manipulation_testTest client-side price manipulation by sending modified price values. Sends price=0, price=1, price=-1, and negative quantity variants to check if the server validates prices server-side. Returns: {"results": [{"test_case": str, "payload": str, "status": int, "length": int, "accepted": bool, "snippet": str}]}. Side effects: May add items to cart or create orders at manipulated prices.
Input schema
{
  "type": "object",
  "properties": {
    "url": {
      "type": "string",
      "description": "URL that processes the purchase/cart action"
    },
    "price_param": {
      "type": "string",
      "description": "Parameter name for the price, e.g. 'price', 'amount', 'total'"
    },
    "cart_endpoint": {
      "type": "string",
      "description": "Separate cart/checkout endpoint to verify final price after manipulation"
    },
    "extra_params": {
      "type": "string",
      "description": "Additional form parameters, e.g. 'productId=1&quantity=1'"
    },
    "auth_cookie": {
      "type": "string",
      "description": "Session cookie for authenticated requests"
    },
    "content_type": {
      "type": "string",
      "description": "Request content type: 'form' or 'json'"
    }
  },
  "required": [
    "url",
    "price_param"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
race_last_byte_syncLast-byte synchronization race condition attack. Sends all requests minus their final byte, pauses, then sends all final bytes simultaneously. Works over HTTP/1.1 with multiple connections. Returns array of responses.
Input schema
{
  "type": "object",
  "properties": {
    "target_url": {
      "type": "string",
      "description": "Base target URL, e.g. https://example.com"
    },
    "requests": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "method": {
            "type": "string",
            "description": "HTTP method"
          },
          "path": {
            "type": "string",
            "description": "Request path, e.g. /api/redeem"
          },
          "headers": {
            "type": "object",
            "additionalProperties": {
              "type": "string"
            },
            "description": "Additional headers as key-value pairs"
          },
          "body": {
            "type": "string",
            "description": "Request body"
          }
        },
        "required": [
          "method",
          "path"
        ],
        "additionalProperties": false
      },
      "minItems": 2,
      "description": "Array of requests to synchronize"
    }
  },
  "required": [
    "target_url",
    "requests"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
race_single_packetHTTP/2 single-packet race condition attack. Multiplexes all requests into a single TCP packet so they arrive simultaneously at the server. Used to exploit TOCTOU bugs like double-spending, coupon reuse, parallel account creation. Returns array of responses with status codes.
Input schema
{
  "type": "object",
  "properties": {
    "target_url": {
      "type": "string",
      "description": "Base target URL, e.g. https://example.com"
    },
    "requests": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "method": {
            "type": "string",
            "description": "HTTP method"
          },
          "path": {
            "type": "string",
            "description": "Request path, e.g. /api/redeem"
          },
          "headers": {
            "type": "object",
            "additionalProperties": {
              "type": "string"
            },
            "description": "Additional headers as key-value pairs"
          },
          "body": {
            "type": "string",
            "description": "Request body"
          }
        },
        "required": [
          "method",
          "path"
        ],
        "additionalProperties": false
      },
      "minItems": 2,
      "description": "Array of requests to send simultaneously"
    }
  },
  "required": [
    "target_url",
    "requests"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
raw_connection_reuseSend multiple raw HTTP requests on a single TLS connection. Useful for testing connection-level attacks like request smuggling, pipeline confusion, and socket poisoning.
Input schema
{
  "type": "object",
  "properties": {
    "target_host": {
      "type": "string",
      "description": "Target hostname"
    },
    "target_port": {
      "type": "number",
      "default": 443,
      "description": "Target port (default 443)"
    },
    "requests": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Array of raw HTTP request strings to send sequentially on one connection"
    }
  },
  "required": [
    "target_host",
    "requests"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
raw_h2_smuggleHTTP/2 request smuggling via Python h2 library with header validation disabled. Allows CRLF in header values and appending smuggled HTTP/1.1 requests in the body. Returns all responses received.
Input schema
{
  "type": "object",
  "properties": {
    "target_url": {
      "type": "string",
      "description": "Target URL, e.g. https://example.com"
    },
    "method": {
      "type": "string",
      "default": "GET",
      "description": "HTTP method"
    },
    "headers": {
      "type": "array",
      "items": {
        "type": "array",
        "items": {
          "type": "string"
        },
        "minItems": 2,
        "maxItems": 2
      },
      "description": "Array of [name, value] pairs — CRLF allowed in values for smuggling"
    },
    "body": {
      "type": "string",
      "description": "Request body"
    },
    "smuggled_request": {
      "type": "string",
      "description": "Optional complete HTTP/1.1 request to append after body for CL.0 / H2.CL smuggling"
    }
  },
  "required": [
    "target_url",
    "headers"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
raw_http_sendSend raw bytes over a TLS socket to a target host. Bypasses HTTP library normalization — useful for smuggling, CRLF injection, malformed requests. Returns the first 4096 bytes of the raw response.
Input schema
{
  "type": "object",
  "properties": {
    "target_host": {
      "type": "string",
      "description": "Target hostname, e.g. example.com"
    },
    "target_port": {
      "type": "number",
      "default": 443,
      "description": "Target port (default 443)"
    },
    "raw_request": {
      "type": "string",
      "description": "The literal HTTP request bytes to send (use \\r\\n for CRLF)"
    }
  },
  "required": [
    "target_host",
    "raw_request"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
recon_directory_bruteforceDirectory brute-force using parallel curl requests. Returns results (path/status/length), found_count, and paths_tested. Read-only GET requests, sends one request per wordlist entry per extension.
Input schema
{
  "type": "object",
  "properties": {
    "target": {
      "type": "string",
      "description": "Base URL, e.g. https://example.com"
    },
    "wordlist": {
      "type": "string",
      "description": "Path to wordlist file. Uses built-in common paths if not provided."
    },
    "threads": {
      "type": "number",
      "minimum": 1,
      "maximum": 50,
      "description": "Concurrent request count",
      "default": 10
    },
    "extensions": {
      "type": "string",
      "description": "Comma-separated extensions to append, e.g. 'php,html,txt'"
    }
  },
  "required": [
    "target"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
recon_dnsFull DNS enumeration: A, AAAA, MX, TXT, NS, CNAME, AXFR, BIND version. Returns records object, axfr_result, and bind_version. Read-only DNS queries.
Input schema
{
  "type": "object",
  "properties": {
    "target": {
      "type": "string",
      "description": "Target domain, e.g. example.com"
    }
  },
  "required": [
    "target"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
recon_git_secretsSearch git history for secrets: commit messages, author info, branches, deleted files. Returns secrets_in_code_history, unique_authors, branches, deleted_files_summary, and suspicious_commit_messages. Read-only git operations on local repository.
Input schema
{
  "type": "object",
  "properties": {
    "repo_path": {
      "type": "string",
      "description": "Path to the git repository"
    }
  },
  "required": [
    "repo_path"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
recon_quickQuick reconnaissance: robots.txt, security.txt, common dirs, response headers. Returns robots_txt, security_txt, response_headers, accessible_directories, and error_page_snippet. Read-only, sends ~10 GET requests.
Input schema
{
  "type": "object",
  "properties": {
    "target": {
      "type": "string",
      "description": "Target domain or URL, e.g. example.com or https://example.com"
    }
  },
  "required": [
    "target"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
recon_s3_bucketTest an S3 bucket for public access (listing, reading). Returns bucket_url, listable, listing_snippet, and readable_files. Read-only requests to S3.
Input schema
{
  "type": "object",
  "properties": {
    "bucket_name": {
      "type": "string",
      "description": "S3 bucket name to test, e.g. 'assets.example.com'"
    }
  },
  "required": [
    "bucket_name"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
recon_tls_sansExtract Subject Alternative Names from the TLS certificate. Returns common_name, subject_alternative_names, issuer, validity, and san_count. Read-only TLS handshake.
Input schema
{
  "type": "object",
  "properties": {
    "target": {
      "type": "string",
      "description": "Target domain or IP:port, e.g. example.com or 1.2.3.4:443"
    }
  },
  "required": [
    "target"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
recon_vhostBrute-force virtual hosts by fuzzing the Host header. Returns baseline_length, results (vhost/status/length/length_delta), unique_vhosts, and tested count. Read-only, sends one request per wordlist entry.
Input schema
{
  "type": "object",
  "properties": {
    "target": {
      "type": "string",
      "description": "Target IP or domain to send requests to"
    },
    "base_domain": {
      "type": "string",
      "description": "Base domain for vhost names, e.g. hackycorp.com"
    },
    "wordlist": {
      "type": "string",
      "description": "Path to wordlist file. Uses built-in common subdomains if not provided."
    }
  },
  "required": [
    "target",
    "base_domain"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
role_escalation_testTest cookie/parameter-based role escalation. Sends requests with various role cookie values (Admin=true, roleid=2, etc.) and checks for privilege escalation. Also tests JSON body field manipulation for profile update endpoints. Returns: {"baseline": dict, "results": [{"value": str, "status": int, "length": int, "escalated": bool}], "escalation_candidates": [str]}. Side effects: If json_body is set, sends POST/PUT requests that may modify state.
Input schema
{
  "type": "object",
  "properties": {
    "url": {
      "type": "string",
      "description": "Protected URL to access, e.g. https://target/admin or https://target/api/users"
    },
    "cookie_name": {
      "type": "string",
      "description": "Cookie name for role control, e.g. 'admin', 'role', 'is_admin'"
    },
    "cookie_values": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "minItems": 1,
      "maxItems": 20,
      "description": "Values to test, e.g. ['true','1','admin','2','yes']"
    },
    "extra_cookies": {
      "type": "string",
      "description": "Additional cookies to include, e.g. 'session=abc123; logged_in=true'"
    },
    "json_body": {
      "type": "string",
      "description": "JSON body for POST-based role escalation, e.g. '{\"roleid\":2}'. Will test each value substituted"
    },
    "json_field": {
      "type": "string",
      "description": "JSON field to manipulate in json_body, e.g. 'roleid'"
    }
  },
  "required": [
    "url",
    "cookie_name",
    "cookie_values"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
sqli_blind_booleanBoolean-based blind SQLi with binary search character enumeration. Uses ASCII(SUBSTRING(...))>N technique with binary search for efficiency. Determines true/false by comparing response lengths. Returns extracted_value, characters_found, requests_sent. Side effects: Read-only. Sends ~8 requests per character (binary search on ASCII 32-126).
Input schema
{
  "type": "object",
  "properties": {
    "url": {
      "type": "string",
      "description": "Full URL with injectable parameter"
    },
    "parameter": {
      "type": "string",
      "description": "Vulnerable parameter name"
    },
    "query": {
      "type": "string",
      "description": "SQL sub-query to extract, e.g. 'database()' or '(SELECT password FROM users LIMIT 1)'"
    },
    "max_length": {
      "type": "number",
      "minimum": 1,
      "maximum": 100,
      "description": "Maximum string length to extract"
    }
  },
  "required": [
    "url",
    "parameter"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
sqli_blind_timeTime-based blind SQLi detection for MySQL, PostgreSQL, and MSSQL. Sends sleep-inducing payloads and measures response time to detect injection. Returns vulnerable, dbtype, and results array with payload, response_time, triggered. Side effects: Read-only but slow (each payload waits up to delay_seconds). Sends 3 requests.
Input schema
{
  "type": "object",
  "properties": {
    "url": {
      "type": "string",
      "description": "Full URL with injectable parameter"
    },
    "parameter": {
      "type": "string",
      "description": "Vulnerable parameter name"
    },
    "dbtype": {
      "type": "string",
      "enum": [
        "mysql",
        "postgresql",
        "mssql"
      ],
      "description": "Target database type"
    },
    "delay_seconds": {
      "type": "number",
      "minimum": 1,
      "maximum": 10,
      "description": "Sleep duration for true condition"
    }
  },
  "required": [
    "url",
    "parameter"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
sqli_file_readRead server files via UNION SELECT LOAD_FILE(). Requires MySQL FILE privilege. Uses LOAD_FILE() in a UNION SELECT. Returns file_content, success, target_file. Errors: FILE privilege required. Returns empty if privilege denied.
Input schema
{
  "type": "object",
  "properties": {
    "url": {
      "type": "string",
      "description": "Full URL with injectable parameter"
    },
    "parameter": {
      "type": "string",
      "description": "Vulnerable parameter name"
    },
    "target_file": {
      "type": "string",
      "description": "Server-side file to read, e.g. /etc/passwd"
    },
    "column_count": {
      "type": "number",
      "minimum": 1,
      "maximum": 20,
      "description": "Number of columns (from previous UNION discovery)"
    },
    "string_column": {
      "type": "number",
      "minimum": 1,
      "maximum": 20,
      "description": "1-indexed column that displays strings"
    }
  },
  "required": [
    "url",
    "parameter"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
sqli_login_bypassBypass login via SQL comment truncation (administrator'--). Extracts CSRF token from form, then POSTs with SQLi in the username field. The -- comment truncates the password check. Returns csrf_extracted, status_code, response_length, headers, likely_bypass.
Input schema
{
  "type": "object",
  "properties": {
    "url": {
      "type": "string",
      "description": "Login form URL, e.g. https://target/login"
    },
    "username": {
      "type": "string",
      "description": "Target username to bypass auth for, e.g. 'administrator'"
    },
    "csrf_field": {
      "type": "string",
      "description": "Name of the CSRF token field in the form"
    },
    "username_field": {
      "type": "string",
      "description": "Name of the username form field"
    },
    "password_field": {
      "type": "string",
      "description": "Name of the password form field"
    }
  },
  "required": [
    "url"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
sqli_union_extractStep-by-step UNION-based data extraction. 1. Finds column count via ORDER BY. 2. Identifies string-displayable columns via UNION SELECT. 3. Extracts database name and version. 4. Lists tables and columns. Returns column_count, string_columns, db_name, db_version, tables, user_columns. Side effects: Read-only GET requests. Sends ~30 requests depending on column count.
Input schema
{
  "type": "object",
  "properties": {
    "url": {
      "type": "string",
      "description": "Full URL with injectable parameter, e.g. https://target/filter?category=Gifts"
    },
    "parameter": {
      "type": "string",
      "description": "Vulnerable query parameter name"
    },
    "max_columns": {
      "type": "number",
      "minimum": 1,
      "maximum": 20,
      "description": "Maximum columns to probe with ORDER BY"
    }
  },
  "required": [
    "url",
    "parameter"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
sqli_where_bypassTest WHERE clause bypass via OR 1=1 variants. Sends multiple payloads (OR 1=1--, OR '1'='1, OR 1=1/*, etc.) against the target parameter and compares response lengths to the baseline. Returns baseline_length and results array. Side effects: None (read-only GET requests). Sends 7 requests total.
Input schema
{
  "type": "object",
  "properties": {
    "url": {
      "type": "string",
      "description": "Full URL with query parameter, e.g. https://target/filter?category=Gifts"
    },
    "parameter": {
      "type": "string",
      "description": "Vulnerable query parameter name, e.g. 'category'"
    },
    "value": {
      "type": "string",
      "description": "Legitimate parameter value to base the injection on, e.g. 'Gifts'"
    }
  },
  "required": [
    "url",
    "parameter",
    "value"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
ssrf_cloud_metadataTest SSRF access to cloud metadata endpoints (AWS/GCP/Azure). Attempts to reach instance metadata services through the SSRF vector. Returns results array with provider, endpoint, status, length, response_snippet. Side effects: May cause target to request cloud metadata. Could expose IAM credentials if successful.
Input schema
{
  "type": "object",
  "properties": {
    "url": {
      "type": "string",
      "description": "Target URL with SSRF-vulnerable parameter"
    },
    "parameter": {
      "type": "string",
      "description": "Parameter that accepts URLs"
    },
    "cloud_provider": {
      "type": "string",
      "enum": [
        "aws",
        "gcp",
        "azure",
        "all"
      ],
      "description": "Cloud provider to test metadata endpoints for"
    },
    "method": {
      "type": "string",
      "enum": [
        "GET",
        "POST"
      ],
      "description": "HTTP method"
    }
  },
  "required": [
    "url",
    "parameter"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
ssrf_testTest SSRF with localhost bypass variants. Sends 10+ representations of localhost (127.0.0.1, 0, decimal, hex, IPv6, etc.) to check if the server fetches internal resources. Returns results array with variant, payload_url, status, length, different_from_baseline per attempt. Side effects: May cause the target server to make internal requests.
Input schema
{
  "type": "object",
  "properties": {
    "url": {
      "type": "string",
      "description": "Target URL that accepts a URL/host parameter"
    },
    "parameter": {
      "type": "string",
      "description": "Parameter that accepts URLs, e.g. 'url', 'src', 'redirect'"
    },
    "internal_target": {
      "type": "string",
      "description": "Internal resource to reach, e.g. 'http://localhost/admin'"
    },
    "method": {
      "type": "string",
      "enum": [
        "GET",
        "POST"
      ],
      "description": "HTTP method"
    }
  },
  "required": [
    "url",
    "parameter"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
volatility_linuxRun a Volatility 2 Linux plugin against a memory dump. Returns plugin, profile, success, output, and errors. Read-only analysis. Requires volatility2 (vol.py) on PATH.
Input schema
{
  "type": "object",
  "properties": {
    "dump_path": {
      "type": "string",
      "description": "Path to the Linux memory dump file"
    },
    "profile": {
      "type": "string",
      "description": "Volatility 2 profile name, e.g. 'LinuxCentOS7_7_1908x64'"
    },
    "plugin": {
      "type": "string",
      "enum": [
        "linux_banner",
        "linux_bash",
        "linux_pslist",
        "linux_pstree",
        "linux_netstat",
        "linux_enumerate_files",
        "linux_check_syscall",
        "linux_hidden_modules",
        "linux_lsmod",
        "linux_mount",
        "linux_ifconfig",
        "linux_route_cache"
      ],
      "description": "Volatility 2 Linux plugin to run"
    }
  },
  "required": [
    "dump_path",
    "profile",
    "plugin"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
volatility_windowsRun a Volatility 3 Windows plugin against a memory dump. Returns plugin, success, output, and errors. Read-only analysis, Volatility 3 auto-detects OS. Requires vol3 (vol) on PATH.
Input schema
{
  "type": "object",
  "properties": {
    "dump_path": {
      "type": "string",
      "description": "Path to the Windows memory dump file"
    },
    "plugin": {
      "type": "string",
      "enum": [
        "windows.info",
        "windows.pslist",
        "windows.pstree",
        "windows.netscan",
        "windows.netstat",
        "windows.filescan",
        "windows.malfind",
        "windows.cmdline",
        "windows.dlllist",
        "windows.handles",
        "windows.registry.hivelist",
        "windows.registry.printkey",
        "windows.envars",
        "windows.svcscan"
      ],
      "description": "Volatility 3 Windows plugin to run"
    }
  },
  "required": [
    "dump_path",
    "plugin"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
xss_payload_generateGenerate context-appropriate XSS payloads with optional filter evasion. Returns a list of payloads tailored to the injection context and filter bypass requirements. Returns context, filter_bypass, payloads array, notes. Side effects: None. Pure payload generation, no network requests.
Input schema
{
  "type": "object",
  "properties": {
    "context": {
      "type": "string",
      "enum": [
        "html_body",
        "html_attribute",
        "javascript",
        "url",
        "css"
      ],
      "description": "Injection context: where the user input lands"
    },
    "filter_bypass": {
      "type": "string",
      "enum": [
        "none",
        "tag_filter",
        "keyword_filter",
        "waf",
        "aggressive"
      ],
      "description": "Level of filter evasion needed"
    },
    "callback_url": {
      "type": "string",
      "description": "Attacker-controlled URL for data exfiltration payloads"
    }
  },
  "required": [
    "context"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
xss_reflected_testTest multiple reflected XSS vectors against a parameter. Sends 10 payloads (script tags, event handlers, SVG, attribute injection, case variation, template literals) and checks if they appear unescaped in the response. Returns results array with reflected/encoded/status per payload, and vulnerable_count. Side effects: Read-only GET requests. Sends 10 requests.
Input schema
{
  "type": "object",
  "properties": {
    "url": {
      "type": "string",
      "description": "URL with reflectable parameter, e.g. https://target/search?q=test"
    },
    "parameter": {
      "type": "string",
      "description": "Parameter name that reflects input, e.g. 'q'"
    }
  },
  "required": [
    "url",
    "parameter"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——

Resources 27

Resource templates 0

Prompts 23

Changes from previous version

Compared with initial baseline using full_baseline.

RiskChangeSubject
No material changes recorded.

Confirmed vulnerabilities

SeverityFindingAdvisory
No confirmed vulnerability is published for this version.

Provenance

Artifact SHA-256: abfa100f07988e129ef435f5a8fff2b72e577728b5271738a4d382da68d82e69

Scanner: mcp-proof-engine 0.1.0.

Let’s talk about MCP security.

Share your details and our security team will contact you.