Web应用逆向与安全测试MCP服务器

web-reversing-mcp

MCP server for web application reverse engineering and reconnaissance. Wraps industry-standard tools (subfinder, httpx, nuclei, katana, ffuf, sqlmap, dalfox, and others) behind a unified interface for LLM-driven web security testing.

What it does

Reconnaissance

• Subdomain enumeration via subfinder (passive sources: crt.sh, HackerTarget, etc.)
• Technology detection via httpx (status codes, titles, tech fingerprinting)
• Port scanning via naabu
• DNS resolution via dnsx (A, AAAA, CNAME, MX, NS, TXT records)
• URL discovery via gau (Wayback Machine, OTX, CommonCrawl)

Crawling & Discovery

• Web spidering via katana with JavaScript parsing support
• Parameter discovery via Arjun (hidden GET/POST parameters)
• Directory fuzzing via ffuf

Vulnerability Scanning

• Nuclei template-based scanning with severity and tag filtering
• XSS detection via dalfox
• SQL injection testing via sqlmap (non-interactive)
• HTTP security header analysis
• CORS misconfiguration detection
• SSL/TLS certificate and configuration checks
• Secret scanning for leaked API keys, tokens, and credentials

JavaScript & WASM Reversing

• JS deobfuscation via webcrack (also unpacks bundles) or restringer
• JS beautification / unminification
• Static JS analysis -- extract endpoints, secrets, domains, framework detection
• WASM-to-WAT decompilation
• WASM string extraction

HTTP Client

• Full HTTP request support with custom headers, body, cookies
• Redirect chain tracking, response header and body inspection

Scope Management

• Define in-scope targets (domains with wildcard support, IPs, URLs)
• Exclude specific targets
• Scope checking for all operations

Requirements

• Python 3.10+
• Dependencies: pip install -r requirements.txt
• External tools (install separately, each tool is optional -- features degrade gracefully):
  • subfinder
  • httpx
  • naabu
  • dnsx
  • gau
  • katana
  • ffuf
  • nuclei
  • dalfox
  • sqlmap
  • webcrack (Node.js)

Setup

pip install -r requirements.txt
python server.py

Architecture

web-reversing/
  server.py              # MCP server, tool definitions
  config.py              # Configuration
  engines/
    recon.py             # Subdomain enum, tech detect, port scan, DNS, URL discovery
    crawler.py           # Web crawling, param discovery, dir fuzzing
    scanner.py           # Nuclei, XSS, SQLi, headers, CORS, SSL, secrets
    deobfuscator.py      # JS deobfuscation, beautification, analysis, WASM
    http_client.py       # HTTP request handling
  platforms/             # Platform-specific integrations
  utils/
    formatters.py        # Output formatting
    scope.py             # Scope management
    validation.py        # Input validation

License

CC BY-NC-SA 4.0 -- see LICENSE.