MCP.Market

HackTricks MCP Server

by Xplo8E·io.github.Xplo8E/hacktricks-mcp-server·v1.3.4·10 stars
No reviews yet

Search and query HackTricks pentesting documentation with quick lookup and section extraction

C60/100grade C
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
C60/100

full report

Adoption
Growing

10 stars57 downloads/wk

Reviews

Write one

Nobody has reviewed HackTricks MCP Server yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

HackTricks MCP Server tools (7)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • get_hacktricks_cheatsheet

    Extract ALL CODE BLOCKS from a page (commands, payloads, scripts, one-liners). Skips explanatory text. Perfect for: 'give me the exploit command', 'show me the payload', 'what's the syntax'. Returns code with language tags (bash, python, etc.).

  • get_hacktricks_outline

    Get TABLE OF CONTENTS (all section headers) of a page. Returns ~20-50 lines showing page structure. Use this FIRST after search to: (1) verify page is relevant, (2) find exact section names for get_hacktricks_section. Cost: ~100 tokens vs 3000+ for full page.

  • get_hacktricks_page

    Get FULL page content. ⚠️ EXPENSIVE: Pages average 3000-15000 tokens. PREFER: get_hacktricks_section for specific topics, get_hacktricks_cheatsheet for just commands. Only use this when you need the complete page or multiple sections.

  • get_hacktricks_section

    Extract ONE SECTION from a page. MOST EFFICIENT way to read content. Typical sections: 'Exploitation', 'Enumeration', 'Prevention', 'Example', 'Payload', 'PoC', 'Bypass'. Use get_hacktricks_outline first to see exact section names. Returns ~200-500 tokens vs 3000+ for full page.

  • hacktricks_quick_lookup

    ⚡ ONE-SHOT exploitation lookup. Searches, finds best page, and returns exploitation sections + code blocks. Use for: 'how do I exploit X', 'give me X payload', 'X attack technique'. Handles aliases (sqli→SQL injection, xss→Cross-site scripting, rce, lfi, ssrf, etc.). Returns: page title, exploitation sections, and top 5 code blocks.

  • list_hacktricks_categories

    Browse HackTricks structure. Without params: list all categories. With category: show all pages in that category. Use when: (1) unsure which category to search, (2) want to explore what's available, (3) need exact file paths.

  • search_hacktricks

    Search HackTricks for pentesting techniques, exploits, and security info. Returns results GROUPED BY FILE with: page title, match count, relevant sections, and top matches. WORKFLOW: search → get_hacktricks_outline (see structure) → get_hacktricks_section (read specific part). ALWAYS use category filter when possible - saves time and tokens.

Public scan report

scanner v0.1.10 · 2026-10-01 · same rubric, same numbers if you re-run it

2 medium
  • Code scan2 source files scanned15/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 187 days ago4/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (2)

  • mediumnpm install lifecycle script presentinstall.script
  • mediumnpm install lifecycle script presentinstall.script
    package.json: … "start": "node dist/index.js", "postinstall": "node scripts/postinstall.js" }, "k…
Overall 60/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How HackTricks MCP Server compares

Against every graded Web search MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
60/100
higher than 13% of 3,470 Web search servers
Tools
7
the typical Web search server has 5
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
10
more than 85% of 1,786 Web search servers
Downloads a week
57
more than 40% of 827 Web search servers with a package

What its tools let an agent do: 7 read

Install HackTricks MCP Server in Claude Code, Cursor or VS Code

Runs npx -y hacktricks-mcp-server on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add hacktricks-mcp-server -- npx -y hacktricks-mcp-server
Add to Cursor

What the publisher says

From the HackTricks MCP Server repository's README, as published. We do not edit it. Read it on GitHub

HackTricks MCP Server

MCP (Model Context Protocol) server for searching and querying HackTricks pentesting documentation directly from Claude.

Features

  • Quick lookup - One-shot exploitation info with alias support (sqli, xss, ssrf, etc.)
  • Grouped search results - Results aggregated by file with match count, title, and relevant sections
  • Page outline - Quick table of contents to identify relevant sections
  • Section extraction - Read specific sections instead of full pages (token-efficient)
  • Cheatsheet mode - Extract only code blocks/commands from pages
  • Category browsing - Discover available topics and file paths
  • Fast grep search - Uses ripgrep for instant results
  • Security hardened - Protection against command injection and path traversal

Quick Start

Installation

npm install -g hacktricks-mcp-server

The postinstall script automatically clones the HackTricks repository (~2 minutes on first install).

Configure Claude Desktop

Add to your Claude settings (~/.claude/settings.json):

{
  "mcpServers": {
    "hacktricks": {
      "command": "npx",
      "args": ["hacktricks-mcp-server"]
    }
  }
}

Restart Claude Desktop and try: "Search HackTricks for SQL injection"

Alternative: Install from Source

git clone https://github.com/Xplo8E/hacktricks-mcp-server.git
cd hacktricks-mcp-server
git submodule update --init --recursive
npm install
npm run build

Configuration for source install:

{
  "mcpServers": {
    "hacktricks": {
      "command": "node",
      "args": ["/absolute/path/to/hacktricks-mcp-server/dist/index.js"]
    }
  }
}

Usage Examples

Once configured in Claude Desktop, you can ask:

  • "Search HackTricks for SQL injection techniques"
  • "Give me SUID privilege escalation commands"
  • "Show me XSS payloads"
  • "List all pentesting categories in HackTricks"
  • "How do I exploit XXE vulnerabilities?"

The server provides 7 specialized tools for efficient HackTricks searching.

Available Tools

hacktricksquicklookup

⚡ One-shot exploitation lookup. Searches, finds best page, and returns exploitation sections + code blocks in one call.

Parameters:

  • topic (string, required): Attack/technique to look up (e.g., 'SUID', 'sqli', 'xss', 'docker escape')
  • category (string, optional): Category filter for faster results

Supported aliases: sqli, xss, rce, lfi, rfi, ssrf, csrf, xxe, ssti, idor, jwt, suid, privesc

Example:

hacktricks_quick_lookup("SSRF", category="pentesting-web")

Benefits: Reduces 3+ tool calls to 1 for "how do I exploit X" questions.

search_hacktricks

Search through HackTricks documentation. Returns results GROUPED BY FILE with match count, page title, and relevant section headers.

Parameters:

  • query (string, required): Search term or regex pattern
  • category (string, optional): Filter to specific category (e.g., 'pentesting-web')
  • limit (number, optional): Max grouped results (default: 20)

Example output:

Found matches in 5 files for: "SUID"

────────────────────────────────────────────────────────────

📄 **Linux Privilege Escalation**
   Path: src/linux-hardening/privilege-escalation/README.md
   Matches: 12
   Sections: SUID Binaries | Finding SUID | GTFOBins
   Preview:
     L45: Find files with SUID bit set...
     L78: Common SUID exploitation techniques...

────────────────────────────────────────────────────────────

gethacktricksoutline

Get the table of contents of a page (all section headers). Use this BEFORE reading full pages to understand structure.

Parameters:

  • path (string): Relative path to markdown file

Example output:

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

HackTricks MCP Server: common questions

Is HackTricks MCP Server safe?
With care: it is graded C, so read the findings first (60/100). Read the HackTricks MCP Server safety report
How do I install HackTricks MCP Server?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does HackTricks MCP Server need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is HackTricks MCP Server maintained?
The last commit was 220 days ago (2026-03-28). The latest release is v1.3.4.
What can I use instead of HackTricks MCP Server?
Servers from other publishers that do the same job: GitHits MCP server, webclaw MCP server and Sui Knowledge Base (kapa.ai) MCP server.
How does HackTricks MCP Server compare with other Web search MCP servers?
safety score 60/100 (higher than 13% of 3,470 Web search servers); tools 7 (the typical Web search server has 5); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to HackTricks MCP Server

Same job from other publishers: the closest match first, then the best rated.

  • GitHits
    Search public open-source code, documentation, metadata, vulnerabilities, changelogs, and examples.
    A
  • webclaw
    Web scraping, search, crawling, structured extraction and research for AI agents.
    A
  • Sui Knowledge Base (kapa.ai)
    Semantic search across Sui documentation and knowledge sources, powered by kapa.ai
    A
  • jDocmunch MCP
    Section-level doc search for .md, .rst, .adoc, .ipynb, .html, .yaml, .json, and OpenAPI specs.
    A
  • Ref Tools
    Token-efficient search for coding agents over public and private documentation.
    A