Enables mobile penetration testing and reverse engineering of Android APK files, including binary analysis and security assessments.
Provides tools for attacking and auditing Apache web servers, including vulnerability exploitation and security testing.
Provides tools for Bluetooth security testing, including attack simulations and vulnerability assessment.
Provides tools for container security testing, including Docker attack simulations and container escape techniques.
Enables security testing and attack simulation against etcd, including container escape and Kubernetes-related scenarios.
Provides tools for API security testing of GraphQL endpoints, including fuzzing, rate limiting checks, and vulnerability assessment.
Enables mobile penetration testing and reverse engineering of iOS binaries, including binary analysis and security assessments.
Integrates with Metasploit to execute exploits, manage modules, payloads, and targets for penetration testing.
Provides tools for database security testing against MongoDB, including injection attacks and vulnerability exploitation.
Provides tools for database security testing against MySQL, including SQL injection and vulnerability exploitation.
Provides tools for NFC security testing, including attack simulations and vulnerability assessment.
Provides tools for attacking and auditing NGINX web servers, including vulnerability exploitation and security testing.
Provides tools for database security testing against PostgreSQL, including SQL injection and vulnerability exploitation.
Provides tools for database security testing against Redis, including injection attacks and vulnerability exploitation.
Integrates with VirusTotal for threat intelligence, enabling malware analysis, hash lookups, and indicator enrichment.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type @ followed by the MCP server name and your instructions, e.g., "@OffSec scan 192.168.1.100 for open ports and services"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
OffSec — Pentest, CTI e Segurança Ofensiva.
Do terminal ou agente com uma CLI e servidor MCP.
OffSec by True Hacking é um servidor MCP (Model Context Protocol) focado em:
Pentest: reconhecimento, exploração, post-exploitation.
CTI (Intelligence): threat intel, malware analysis, forense.
Ofensiva: auditoria de segurança (testes, simulações).
Funciona como um servidor MCP (stdin/stdio) para o assistente de IA (via OpenCode, Claude, etc.).
Related MCP server: Hercules MCP
# (via npx - a forma de usar via CLI/MCP server).
npx -y offsec-by-truehacking mcpOu com npm (via link):
# (link package local).
npm link offsec-by-truehacking
# (ou via link-global:).
npm link offsec-by-truehacking# (via CLI): offsec [command] [options]
offsec scan 192.168.1.100
offsec exploit 192.168.1.100 --module exploit/windows/smb
offsec pcap --interface eth0 --filter "tcp port 80"offsec-by-truehacking/
├── server.json # MCP server schema (mirrors REA).
├── package.json # Dependencies (ts, npm, turborepo, vitest).
├── tsconfig.json # TypeScript (ESNext, strict, module: ESNext).
├── scripts/ # Build/run scripts (scripts/offsec.mjs, scripts/run-exclusive.mjs, scripts/generate-skill-metadata.mjs).
├── .agents/ # AI assistant skills (parallel to REA .agents/skills).
│ └── skills/ # JSON files (pentest, CTI, recon).
├── src/ # Main source (TypeScript).
│ ├── main.ts # Entry point (bootstraps MCP session).
│ ├── serverIdentity.ts # Server identity (id, name, version).
│ ├── catalogIdentity.ts # Tool catalog (scan, pcap, exploit, msf, etc.).
│ ├── config/ # parseConfig (server.json, env vars).
│ ├── process/ # snapshotEnvironment (env, uid, tmp, limits).
│ ├── domain/ # Core types (Result, Error, Provenance, ScanResult, PcapResult, ExploitResult, SessionResult).
│ ├── adapters/ # Tool adapters (nmap, pcap, metasploit).
│ ├── cli/ # CLI commands (maps commands to MCP tools).
│ ├── server/ # MCP tool handlers (tool: scan, pcap, exploit, msf, forensic, etc.).
│ ├── composition/ # Sessions (persistent, lifecycle).
│ └── application/ # Shared workflows (scan, exploit, forensic).
├── tests/ # Unit tests (vitest).
└── .gitignore # Excluded: node_modules, dist, .cache, .npmrc, .nvmrc, .github, LICENSE, pkg/.Ferramenta | Categoria | Descrição |
| Recon | Escaneamento nmap (TCP SYN, UDP, Connect). |
| Recon | Scan rápido (common ports: 22, 80, 443, 8080, 8443). |
| Recon | Scan completo (1–65535 ports). |
| Captura | Captura pcap (tcpdump: interface, filter, file). |
| Captura | Captura live (long-running: duration). |
| Exploit | Executa exploit (payload: reverse/binder/meterpreter). |
| Exploit | Execute Metasploit (msfconsole: modules, payloads, targets). |
| Exploit | Custom payload (reverse, binder, meterpreter, shell). |
| Exploit | CVE-based exploit (lookup + exploit + verify). |
| CTI | Search threat intel (Shodan, VirusTotal, MITRE ATT&CK). |
| CTI | Malware analysis (hash, PE, YARA, strings, signatures). |
| CTI | Forensic (data from local, memory dump, file ops). |
| Framework | List agents/sessions (open sessions). |
| Framework | Interact with an agent (session: read/write/output). |
| Framework | Kill a session (exit/cleanup). |
| Util | Subnet scan (arp/ping discovery + services). |
| Util | Run a command (generic shell). |
| Util | File operations (read/write/transfer). |
| Exploit | Custom payload (meterpreter, reverse shell, etc.). |
| Windows | Kerberoasting (Kerberos ticket extraction). |
| Windows | NTLM credential dump (data from local). |
| Pós-Expo | Persistence (backdoor, keylogger, scheduled task). |
| Pós-Expo | Keylogger (screenshot + keystroke capture). |
| Pós-Expo | Persist via task/registry/cron. |
| Evasão | Encode/decode shellcode (XOR, ROT13, Base64, UDROP). |
| Evasão | Silent mode (reverse/shellcode/binder stealth). |
| Evasão | Network stealth (DNS tunnel, HTTPS, covert). |
| Relatórios | Penetration report (findings, recommendations, CVSS). |
| Relatórios | Write report (PDF/HTML/Markdown). |
| C2 | Create C2 (command-and-control channel). |
| C2 | Interact C2 session (remote shell/command). |
| C2 | Kill (remove) a C2 session. |
| Windows | PrivEsc (sudo, SUID, capabilities, kernel exploit). |
| Windows | Lateral (psExec, WMI, SSH, Pass-the-Hash). |
| Dados | Data exfiltration (DNS, HTTPS, ICMP tunnel). |
| Wireless | Wi-Fi attack (deauth, PMKID, handshake). |
| Cloud | Cloud exploitation (IAM, S3, GCP, Azure). |
| Credenciais | Brute force (SSH, RDP, FTP, SMB, HTTP password). |
| Intel | Connect MISP (Import/export IOCs, indicators). |
| Intel | OSINT (username, email, phone, social media lookup). |
| Rede | Port forwarding (SSH tunnel, SOCKS proxy, port mapping, NAT). |
| Email/Phishing (phishing, spear phishing, DNS spoofing, SMTP relay). | |
| Eng. Social | Social Engineering (vishing, smishing, QR attack, physical attack). |
| IR | Incident Response (IR, triage, forensics, recovery, log analysis, threat hunting). |
| Conformidade | Compliance (audit, CVE verification, vulnerability scan, policy check, risk assessment). |
| HW/RF | Hardware/RF (RFID attack, Bluetooth attack, NFC attack, SDN attack). |
| RE | Binary/RE (assembly, PE/ELF parsing, shellcode generation, ROP chain). |
| Banco de Dados | Database/SQL (SQLi, MySQL, PostgreSQL, MongoDB, Redis, NoSQL). |
| Web | Web Testing (XSS, CSRF, SSRF, SSI, SSTI). |
| Chaves | Key Management (certificate attack, PFX attack, cert harvesting, key theft). |
| Infraestrutura | Network/Infrastructure (DNS attack, DHCP attack, SNMP attack, ARP attack, IPv6 attack, NTP attack). |
| Geração de Payload | Payload Generation (ASM, shellcode, ROP, file generation). |
| Mobile | Mobile (Android APK reverse engineering, iOS binary analysis, mobile penetration testing). |
| Container | Container (Docker attack, container escape, K8s attack, etcd attack). |
| API | API Testing (REST API, GraphQL, OpenAPI, rate limiting, fuzzing). |
| Privacidade/Leak | Privacy (data leak detection, breach checking, dark web monitoring). |
| Telefone | Phone (SS7 attack, SIM swap, smishing, vishing, caller ID spoofing). |
| Virtualização | Virtualization (VM escape, hypervisor attack, container escape). |
| Servidor | Server (Apache attack, Nginx attack, IIS attack, Tomcat attack, Windows Server attack). |
| Email (phishing, spear phishing, DNS spoofing, email exploit, DKIM attack, header attack). |
Código | Causa | Solução |
403 | Permissão negada (root/privileges). | Use |
404 | Binary não encontrado (nmap/msf). | Instale: |
429 | Capacidade excedida (dados muito longos). | Limite: |
499 | Cancelamento (timeout 5min). | Aumente: |
500 | Erro de tempo (binário quebrado). | Execute: |
Versão: 0.0.1 (Pré-Alpha) | Última atualização: 18/10/2026
Enrich, search, assess, and manage threat intelligence through 80+ typed MCP tools.
Compliance frameworks (SOC 2, ISO 27001, CMMC, NIST, more) delivered to AI agents as MCP tools.
MCP server for Pentest-Tools.com: run scans, manage findings and reports via your preffered LLM.
Hyperion — MCP tool marketplace for AI agents: web, OSINT, security, research via one key.
