D0rs4n/mcpwn

D0rs4n

Python6updated 4mo ago

Claude

View on GitHub

README

        ███╗   ███╗ ██████╗██████╗ ██╗    ██╗███╗   ██╗
        ████╗ ████║██╔════╝██╔══██╗██║    ██║████╗  ██║
        ██╔████╔██║██║     ██████╔╝██║ █╗ ██║██╔██╗ ██║
        ██║╚██╔╝██║██║     ██╔═══╝ ██║███╗██║██║╚██╗██║
        ██║ ╚═╝ ██║╚██████╗██║     ╚███╔███╔╝██║ ╚████║
        ╚═╝     ╚═╝ ╚═════╝╚═╝      ╚══╝╚══╝ ╚═╝  ╚═══╝
       · MCP server recon & exploitation toolkit ·

Connect → Enumerate → Call → Proxy → Inject. A fast, aesthetic CLI for red-teaming Model Context Protocol servers.

</div>

[!WARNING] Research & authorized testing only. See the Disclaimer before you run anything.

✦ What it does

Point mcpwn at an MCP server and it will connect over stdio / HTTP / SSE, enumerate everything the server exposes, let you call tools, render prompts and read resources — then take it further: route every request through an intercepting proxy (Burp Suite) or hand a tool's arguments to sqlmap for SQL-injection testing.

| | Capability | | - | --- | | 🔌 | Multi-transport — stdio commands, Streamable HTTP, legacy SSE (auto-detected) | | 🔎 | Full recon — tools, prompts, resources and resource templates in clean tables | | 🛠 | Drive it — call tools, render prompts, read resources, inspect parameter schemas | | 🐚 | Interactive shell — one persistent connection, ideal for stateful servers | | 🛰 | Proxy-aware — funnel all HTTP/SSE traffic through Burp with one flag | | 💉 | sqlmap bridge — auto-build a raw injectable reque