browser-firefox-mcp
browser-firefox-mcp
面向渗透测试代理的安全聚焦的Firefox浏览器MCP服务器。基于Playwright构建,采用Python原生API,专为漏洞扫描、会话操纵、网络检查和侦察而设计。
功能
Firefox优先:使用Playwright的原生Firefox引擎进行精确渲染(特别适用于反机器人检测)
安全工具:XSS载荷注入、表单枚举、DOM分析、敏感数据泄露检测
会话管理:Cookie导出/注入、令牌提取、存储操纵
网络检查:通过CDP进行请求/响应拦截和捕获
侦察:技术栈指纹识别、框架检测、元数据提取
MCP stdio传输:适用于cyberstrikeai、Claude Code、Cursor以及任何兼容MCP的客户端
Related MCP server: mcp-browser-automation
快速开始(Kali Linux)
git clone https://your-repo/browser-firefox-mcp.git
cd browser-firefox-mcp
uv venv && source .venv/bin/activate
uv pip install -e .
playwright install firefox
python server.py # or: browser-firefox-mcp与cyberstrikeai集成
添加到你的 ~/.config/cyberstrikeai/config.json(或等效文件):
{
"mcp_servers": {
"firefox-browser": {
"command": "python",
"args": ["server.py"],
"cwd": "/path/to/browser-firefox-mcp"
}
}
}代理将自动发现工具:navigate、click、fill、screenshot、
inject_payload、scan_forms、capture_network、get_session_info、
recon_technology_stack等。
架构
┌──────────────────┐ JSON-RPC (stdio) ┌──────────────────┐
│ cyberstrikeai │ ◄──────────────────────► │ server.py │
│ (agent) │ │ (MCP stdio) │
└──────────────────┘ └────────┬─────────┘
│
┌────────────▼─────────┐
│ core/ modules │
│ engine | page │
│ security | session │
│ network | recon │
└────────────┬─────────┘
│
┌───────▼───────┐
│ Firefox (headless) │
└─────────────────┘许可证
MIT
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Servers
- AlicenseBqualityDmaintenanceA universal browser automation MCP server using Playwright, enabling programmatic control of Chrome with 63 tools for navigation, interaction, media control, and CDP-based diagnostics.63122MIT
- FlicenseBqualityBmaintenanceAn MCP server for generic browser automation using Playwright. Enables MCP clients to navigate pages, inspect elements, execute JavaScript, capture screenshots, and monitor console logs and network traffic via a headless Chromium instance.7
- AlicenseNot gradedqualityCmaintenanceAn MCP server that provides structured control of a Playwright browser for QA, scraping, diagnostics, and reproducible browser workflows.7,623MIT
- FlicenseNot gradedqualityCmaintenanceA policy-aware Meta-MCP server that orchestrates Playwright and Chrome DevTools for secure, high-level browser automation with origin whitelists and credential redaction.
Related MCP Connectors
MCP server for Pentest-Tools.com: run scans, manage findings and reports via your preffered LLM.
Security scanner for MCP servers. Detect vulnerabilities, prompt injection, and tool poisoning.
Browser MCP for logged-in tasks. Uses your Chrome — credentials stay local. Zero-token replay.
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/ironessi/browser-firefox-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server