MCP.Market

Pwntools MCP server

by daedalus·io.github.daedalus/mcp-pwntools·v0.1.0
No reviews yet

MCP server exposing pwntools 4.15.0 functionality for binary exploitation

B82/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B82/100

full report

Adoption
New

0 stars13 downloads/wk

Reviews

Write one

Nobody has reviewed Pwntools yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Pwntools tools (40, 4 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • asm

    Assemble code to bytes.

  • context_get

    Get current pwntools context.

  • context_set

    Set pwntools context.

  • cyclic

    Generate cyclic pattern.

  • cyclic_find

    Find offset in cyclic pattern.

  • disasm

    Disassemble bytes to code.

  • dynelf_resolve

    Dynamic ELF resolution.

  • elf_asm

    Assemble code at a specific address in an ELF.

  • elf_load

    Load an ELF file.

  • elf_read

    Read bytes from an ELF at address.

  • elf_writewrite action

    Write bytes to an ELF at address.

  • enhex

    Encode bytes to hex string.

  • fit

    Fit data into buffer.

  • flat

    Flatten arguments into bytes.

  • fmtstr_payload

    Generate format string payload.

  • fmtstr_split

    Split format string writes.

  • hexdump

    Hexdump utility.

  • listenwrite action

    Create a listening socket.

  • log_debug

    Log debug message.

  • log_error

    Log error message.

  • log_info

    Log info message.

  • log_success

    Log success message.

  • log_warn

    Log warning message.

  • p16

    Pack an integer into 2 bytes.

  • p32

    Pack an integer into 4 bytes.

  • p64

    Pack an integer into 8 bytes.

  • p8

    Pack an integer into 1 byte.

  • process_createwrite action

    Create and interact with a process.

  • remote_connect

    Connect to a remote host.

  • rop_call

    Generate ROP call.

  • rop_load

    Load ELF for ROP.

  • shellcraft

    Generate shellcode.

  • shellcraft_dupsh

    Generate dup shellcode with execve.

  • shellcraft_setreuid

    Generate setreuid shellcode.

  • tube_sendwrite action

    Send data through a tube.

  • u16

    Unpack 2 bytes to integer.

  • u32

    Unpack 4 bytes to integer.

  • u64

    Unpack 8 bytes to integer.

  • u8

    Unpack 1 byte to integer.

  • unhex

    Decode hex string to bytes.

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

no findings
  • Code scan4 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 148 days ago8/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 82/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Pwntools compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
82/100
higher than 63% of 48,273 servers
Tools
40
the typical server has 7
Tools that change things
10%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
13
more than 4% of 11,915 servers with a package

What its tools let an agent do: 33 read · 4 change · 3 run or deploy

Install Pwntools in Claude Code, Cursor or VS Code

claude mcp add mcp-pwntools -- uvx mcp-pwntools
Add to Cursor

What the publisher says

From the Pwntools repository's README, as published. We do not edit it. Read it on GitHub

mcp-pwntools

MCP server exposing pwntools 4.15.0 functionality for binary exploitation tasks.

Install

pip install mcp-pwntools

MCP Server

This package exposes pwntools functionality via the MCP (Model Context Protocol).

Tools

The server provides the following tool categories:

  • Packing/Unpacking: p8, p16, p32, p64, u8, u16, u32, u64, flat
  • Assembly/Disassembly: asm, disasm
  • Shellcode Generation: shellcraft, shellcraftsetreuid, shellcraftdupsh
  • ELF Manipulation: elfload, elfasm, elfread, elfwrite
  • Process Interaction: processcreate, remoteconnect, listen
  • ROP: ropload, ropcall
  • Exploitation: fmtstrpayload, fmtstrsplit
  • Utilities: hexdump, cyclic, cyclicfind, fit, enhex, unhex, contextset, context_get
  • Logging: logdebug, loginfo, logsuccess, logwarn, log_error

Resources

  • elf:// - Load ELF file information
  • context://settings - Get current pwntools context

Usage

Run the MCP server:

mcp-pwntools

Configuration (mcp.json)

{
  "mcpServers": {
    "pwntools": {
      "command": "mcp-pwntools",
      "env": {}
    }
  }
}

Development

git clone https://github.com/daedalus/mcp-pwntools.git
cd mcp-pwntools
pip install -e ".[test]"

# run tests
pytest

# format
ruff format src/ tests/

# lint
ruff check src/ tests/

# type check
mypy src/

mcp-name

mcp-name: io.github.daedalus/mcp-pwntools

Nothing above is checked by us. What we check is on the safety report.

Pwntools: common questions

Is Pwntools MCP server safe?
Mostly: it is graded B (82/100). Read the Pwntools safety report
How do I install Pwntools?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Pwntools need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Pwntools maintained?
The last commit was 183 days ago (2026-05-03). The latest release is v0.1.0.
How does Pwntools compare with other MCP servers?
safety score 82/100 (higher than 63% of 48,273 servers); tools 40 (the typical server has 7); tools that change things 10% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

More from daedalus →