{"name":"io.github.Xplo8E/hacktricks-mcp-server","slug":"xplo8e-hacktricks-mcp-server","title":"HackTricks MCP Server","description":"Search and query HackTricks pentesting documentation with quick lookup and section extraction","url":"https://mcp.market/server/xplo8e-hacktricks-mcp-server","rating":null,"grade":"C","score":60,"certified":false,"status":"active","category":"search","tags":["search"],"presence":{"score":25,"stars":10,"forks":3,"downloads_week":57,"last_push_at":"2026-03-28T22:21:06.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/Xplo8E/hacktricks-mcp-server.git","website":"https://github.com/Xplo8E/hacktricks-mcp-server","version":"1.3.4","remotes":[],"packages":[{"registryType":"npm","identifier":"hacktricks-mcp-server","version":"1.3.4","transport":{"type":"stdio"}}],"tools":[{"name":"get_hacktricks_cheatsheet","description":"Extract ALL CODE BLOCKS from a page (commands, payloads, scripts, one-liners). Skips explanatory text. Perfect for: 'give me the exploit command', 'show me the payload', 'what's the syntax'. Returns code with language tags (bash, python, etc.).","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_hacktricks_outline","description":"Get TABLE OF CONTENTS (all section headers) of a page. Returns ~20-50 lines showing page structure. Use this FIRST after search to: (1) verify page is relevant, (2) find exact section names for get_hacktricks_section. Cost: ~100 tokens vs 3000+ for full page.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_hacktricks_page","description":"Get FULL page content. ⚠️ EXPENSIVE: Pages average 3000-15000 tokens. PREFER: get_hacktricks_section for specific topics, get_hacktricks_cheatsheet for just commands. Only use this when you need the complete page or multiple sections.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_hacktricks_section","description":"Extract ONE SECTION from a page. MOST EFFICIENT way to read content. Typical sections: 'Exploitation', 'Enumeration', 'Prevention', 'Example', 'Payload', 'PoC', 'Bypass'. Use get_hacktricks_outline first to see exact section names. Returns ~200-500 tokens vs 3000+ for full page.","write_action":false,"price_micros":0,"input_schema":null},{"name":"hacktricks_quick_lookup","description":"⚡ ONE-SHOT exploitation lookup. Searches, finds best page, and returns exploitation sections + code blocks. Use for: 'how do I exploit X', 'give me X payload', 'X attack technique'. Handles aliases (sqli→SQL injection, xss→Cross-site scripting, rce, lfi, ssrf, etc.). Returns: page title, exploitation sections, and top 5 code blocks.","write_action":false,"price_micros":0,"input_schema":null},{"name":"list_hacktricks_categories","description":"Browse HackTricks structure. Without params: list all categories. With category: show all pages in that category. Use when: (1) unsure which category to search, (2) want to explore what's available, (3) need exact file paths.","write_action":false,"price_micros":0,"input_schema":null},{"name":"search_hacktricks","description":"Search HackTricks for pentesting techniques, exploits, and security info. Returns results GROUPED BY FILE with: page title, match count, relevant sections, and top matches. WORKFLOW: search → get_hacktricks_outline (see structure) → get_hacktricks_section (read specific part). ALWAYS use category filter when possible - saves time and tokens.","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":60,"grade":"C","scanned_at":"2026-10-01T23:11:29.449Z","report":{"scannerVersion":"0.1.10","scannedAt":"2026-10-01T23:11:29.400Z","components":{"code":{"score":15,"max":25,"notes":["2 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":4,"max":15,"notes":["last push 187 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"install.script","severity":"medium","component":"code","title":"npm install lifecycle script present"},{"id":"install.script","severity":"medium","component":"code","title":"npm install lifecycle script present","evidence":"package.json: … \"start\": \"node dist/index.js\", \"postinstall\": \"node scripts/postinstall.js\" }, \"k…"}],"inputs":{"packages":[{"registryType":"npm","identifier":"hacktricks-mcp-server","version":"1.3.4","found":true,"license":"MIT","hasInstallScripts":true,"dependencyCount":1,"publishedAt":"2025-12-27T04:25:04.945Z","repositoryUrl":"git+https://github.com/Xplo8E/hacktricks-mcp-server.git","weeklyDownloads":57}],"repo":{"found":true,"owner":"Xplo8E","repo":"hacktricks-mcp-server","archived":false,"pushedAt":"2026-03-28T22:21:06Z","stars":10,"forks":3,"openIssues":9,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/55936553?v=4","ownerCreatedAt":"2019-09-29T03:35:44Z","license":"MIT"},"icon":{"url":"https://avatars.githubusercontent.com/u/55936553?v=4&s=128","source":"github"},"presence":{"stars":10,"forks":3,"downloadsWeek":57,"license":"MIT","lastPushAt":"2026-03-28T22:21:06.000Z","score":25}}}},"grade_history":[],"reviews":[]}