browser-firefox-mcp
browser-firefox-mcp
Sicherheitsorientierter Firefox-Browser-MCP-Server für Penetrationstest-Agenten. Aufgebaut auf Playwright mit einer Python-nativen API, entwickelt für Schwachstellenscans, Sitzungsmanipulation, Netzwerkinspektion und Aufklärung.
Funktionen
Firefox-first: Nutzt die native Firefox-Engine von Playwright für präzises Rendering (besonders nützlich für die Anti-Bot-Erkennung)
Sicherheitswerkzeuge: XSS-Payload-Injektion, Formular-Enumeration, DOM-Analyse, Erkennung von Lecks sensibler Daten
Sitzungsverwaltung: Cookie-Export/-Injektion, Token-Extraktion, Speicher-Manipulation
Netzwerkinspektion: Abfangen und Erfassen von Anfragen/Antworten über CDP
Aufklärung: Fingerprinting des Technologie-Stacks, Framework-Erkennung, Metadaten-Extraktion
MCP-stdio-Transport: Funktioniert mit cyberstrikeai, Claude Code, Cursor und jedem MCP-kompatiblen Client
Related MCP server: mcp-browser-automation
Schnellstart (Kali Linux)
git clone https://your-repo/browser-firefox-mcp.git
cd browser-firefox-mcp
uv venv && source .venv/bin/activate
uv pip install -e .
playwright install firefox
python server.py # or: browser-firefox-mcpIntegration mit cyberstrikeai
Fügen Sie Folgendes zu Ihrer ~/.config/cyberstrikeai/config.json hinzu (oder entsprechend):
{
"mcp_servers": {
"firefox-browser": {
"command": "python",
"args": ["server.py"],
"cwd": "/path/to/browser-firefox-mcp"
}
}
}Der Agent erkennt automatisch die folgenden Werkzeuge: navigate, click, fill, screenshot,
inject_payload, scan_forms, capture_network, get_session_info,
recon_technology_stack, usw.
Architektur
┌──────────────────┐ JSON-RPC (stdio) ┌──────────────────┐
│ cyberstrikeai │ ◄──────────────────────► │ server.py │
│ (agent) │ │ (MCP stdio) │
└──────────────────┘ └────────┬─────────┘
│
┌────────────▼─────────┐
│ core/ modules │
│ engine | page │
│ security | session │
│ network | recon │
└────────────┬─────────┘
│
┌───────▼───────┐
│ Firefox (headless) │
└─────────────────┘Lizenz
MIT
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Servers
- AlicenseBqualityDmaintenanceA universal browser automation MCP server using Playwright, enabling programmatic control of Chrome with 63 tools for navigation, interaction, media control, and CDP-based diagnostics.63122MIT
- FlicenseBqualityBmaintenanceAn MCP server for generic browser automation using Playwright. Enables MCP clients to navigate pages, inspect elements, execute JavaScript, capture screenshots, and monitor console logs and network traffic via a headless Chromium instance.7
- AlicenseNot gradedqualityCmaintenanceAn MCP server that provides structured control of a Playwright browser for QA, scraping, diagnostics, and reproducible browser workflows.7,623MIT
- FlicenseNot gradedqualityCmaintenanceA policy-aware Meta-MCP server that orchestrates Playwright and Chrome DevTools for secure, high-level browser automation with origin whitelists and credential redaction.
Related MCP Connectors
MCP server for Pentest-Tools.com: run scans, manage findings and reports via your preffered LLM.
Security scanner for MCP servers. Detect vulnerabilities, prompt injection, and tool poisoning.
Browser MCP for logged-in tasks. Uses your Chrome — credentials stay local. Zero-token replay.
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/ironessi/browser-firefox-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server