Security Operations Multi-Tool Platform (MCP)

1# Security Operations Multi-Tool Platform (MCP)
2[![Trust Score](https://archestra.ai/mcp-catalog/api/badge/quality/securityfortech/secops-mcp)](https://archestra.ai/mcp-catalog/securityfortech__secops-mcp)
3 
4A comprehensive security operations platform that integrates multiple security tools into a unified interface. This platform provides a centralized way to run various security scanning and testing tools.
5 
6## Features
7 
8- **Unified Interface**: Single entry point for multiple security tools
9- **Docker Support**: Easy deployment using Docker
10- **JSON Output**: Consistent JSON output format across all tools
11- **Error Handling**: Robust error handling and reporting
12- **Extensible**: Easy to add new tools and functionality
13 
14## Included Tools
15 
16- **Nuclei**: Fast and customizable vulnerability scanner
17- **FFUF**: Fast web fuzzer and content discovery tool
18- **Amass**: In-depth attack surface mapping and external asset discovery
19- **Arjun**: HTTP parameter discovery tool for finding hidden parameters
20- **Dirsearch**: Web path scanner
21- **Gospider**: Fast web spider for crawling and URL discovery
22- **Hashcat**: Advanced password recovery
23- **HTTPX**: Fast and multi-purpose HTTP toolkit
24- **IPInfo**: IP address information gathering
25- **Nmap**: Network exploration and security auditing
26- **SQLMap**: Automatic SQL injection and database takeover tool
27- **Subfinder**: Subdomain discovery tool
28- **TLSX**: TLS/SSL scanning and analysis
29- **WFuzz**: Web application fuzzer
30- **XSStrike**: Advanced XSS detection and exploitation
31 
32## Tool Categories
33 
34### Web Application Security
35- **Nuclei**: Vulnerability scanning with custom templates
36- **FFUF**: Fast web fuzzing and content discovery
37- **WFuzz**: Web application fuzzing
38- **XSStrike**: XSS detection and exploitation
39- **SQLMap**: SQL injection testing and exploitation
40- **Arjun**: HTTP parameter discovery and testing
41- **Gospider**: Web crawling and URL discovery
42- **Dirsearch**: Directory and file enumeration
43 
44### Network Security
45- **Nmap**: Network scanning and service enumeration
46- **HTTPX**: HTTP probing and analysis
47- **TLSX**: TLS/SSL configuration analysis
48 
49### Reconnaissance
50- **Amass**: Attack surface mapping and asset discovery
51- **Subfinder**: Subdomain enumeration
52- **IPInfo**: IP address intelligence gathering
53 
54### Cryptography
55- **Hashcat**: Password cracking and hash analysis
56 
57## Recent Additions
58 
59### Gospider Integration
60- **Web Crawling**: Automated website crawling and URL discovery
61- **Multiple Output Formats**: JSON and text output support
62- **Filtering Capabilities**: Extension-based filtering and content filtering
63- **Configurable Depth**: Customizable crawling depth and concurrency
64- **Subdomain Support**: Option to include subdomains in crawling
65- **Form Detection**: Automatic detection of HTML forms
66- **Secret Discovery**: Identification of potential sensitive information
67 
68### Arjun Integration
69- **Parameter Discovery**: Find hidden HTTP parameters in web applications
70- **Multiple HTTP Methods**: Support for GET, POST, PUT, and other methods
71- **Bulk Scanning**: Scan multiple URLs simultaneously
72- **Custom Wordlists**: Use custom parameter wordlists
73- **Stable Mode**: Reduced false positives with stable scanning mode
74- **Custom Headers**: Support for custom HTTP headers and authentication
75- **Threading Support**: Configurable threading for faster scans
76 
77## Installation
78 
79### Using Docker (Recommended)
80 
811. Clone the repository:
82   ```bash
83   git clone https://github.com/securityfortech/secops-mcp.git
84   cd secops-mcp
85   ```
86 
872. Build the Docker image:
88   ```bash
89   docker build -t secops-mcp .
90   ```
91 
923. Run the container:
93   ```bash
94   docker run -it --rm secops-mcp
95   ```
96 
97### Manual Installation
98 
991. Clone the repository:
100   ```bash
101   git clone https://github.com/securityfortech/secops-mcp.git
102   cd secops-mcp
103   ```
104 
1052. Create and activate a virtual environment:
106   ```bash
107   python -m venv venv
108   source venv/bin/activate  # On Windows: venv\Scripts\activate
109   ```
110 
1113. Install dependencies:
112   ```bash
113   pip install -r requirements.txt
114   ```
115 
1164. Install required tools:
117   - Follow the installation instructions for each tool in the `tools/` directory
118   - Ensure all tools are in your system PATH
119 
120## Usage
121 
1221. Start the application:
123   ```bash
124   python main.py
125   ```
126 
1272. The application will provide a unified interface for running various security tools.
128 
1293. Each tool returns results in a consistent JSON format:
130   ```json
131   {
132       "success": boolean,
133       "error": string (if error),
134       "results": object (if success)
135   }
136   ```
137 
138## Usage Examples
139 
140### Gospider Web Crawling
141```python
142# Basic web crawling
143gospider_scan("https://example.com", depth=3, include_subs=True)
144 
145# Filtered crawling for specific file types
146gospider_filtered_scan(
147    "https://example.com",
148    extensions=["js", "json", "xml"],
149    exclude_extensions=["png", "jpg", "css"]
150)
151```
152 
153### Arjun Parameter Discovery
154```python
155# Basic parameter discovery
156arjun_scan("https://example.com/api", method="GET")
157 
158# POST parameter discovery with custom data
159arjun_scan(
160    "https://example.com/login",
161    method="POST",
162    data="username=test&password=test",
163    stable=True
164)
165 
166# Bulk parameter scanning
167arjun_bulk_parameter_scan([
168    "https://example.com/api/v1",
169    "https://example.com/api/v2"
170])
171```
172 
173## Tool Configuration
174 
175Each tool can be configured through its respective wrapper in the `tools/` directory. Configuration options include:
176 
177- Output formats
178- Timeouts
179- Verbosity levels
180- Custom wordlists
181- Tool-specific parameters
182 
183## Security Considerations
184 
185- This tool is for authorized security testing only
186- Always obtain proper authorization before scanning systems
187- Be mindful of rate limiting and scanning intensity
188- Respect robots.txt and terms of service
189- Use appropriate wordlists and scanning parameters
190 
191## Contributing
192 
1931. Fork the repository
1942. Create a feature branch
1953. Commit your changes
1964. Push to the branch
1975. Create a Pull Request
198 
199## License
200 
201This project is licensed under the MIT License - see the LICENSE file for details.
202 
203## Acknowledgments
204 
205- All the security tools and their developers
206- The security community for their contributions and support
207