协议安全扫描工具

# Clone the repository
git clone https://github.com/security/mcpreconx.git
cd mcpreconx

# Install dependencies
pip install -r requirements.txt

# Or use the installer
chmod +x install.sh
./install.sh

# Basic scan
python main.py --target http://localhost:3000/sse

# Full security assessment
python main.py -t http://localhost:3000/sse --cve-check --detect-patterns --report-all

# With authentication
python main.py -t http://localhost:3000/sse --auth-token "Bearer YOUR_TOKEN"

# Search GitHub for MCP servers
python main.py --discover-github

# With GitHub token (higher rate limits)
python main.py --discover-github --github-token YOUR_GITHUB_TOKEN

# Limit results
python main.py --discover-github --max-results 100

# Scan a single host
python main.py --discover-internet --target scanme.nmap.org

# Scan a network range
python main.py --discover-internet --target 192.168.1.0/24

# ⚠️ Only scan networks you own or have permission to test!

import asyncio
from modules.mcp_client import MCPClient

async def test_mcp():
    async with MCPClient("http://localhost:3000/sse") as client:
        # Initialize connection
        if await client.initialize():
            print("Connected to MCP server!")
            
            # List tools
            tools = await client.list_tools()
            print(f"Available tools: {len(tools)}")
            
            # Call a tool
            result = await client.call_tool("example_tool", {"param": "value"})
            print(f"Result: {result}")

asyncio.run(test_mcp())

-t, --target          Target MCP server URL
--method              Transport: auto, http, websocket

--discover-github     Discover MCP servers on GitHub
--discover-internet   Discover MCP servers on internet
--github-token        GitHub API token
--max-results         Maximum results (default: 50)

--cve-check           Enable CVE detection
--detect-patterns     Enable attack pattern detection
--risk                Risk level: low, medium, high
--level               Scan intensity 1-5
--safe                Safe mode (default)
--exploit             Enable exploitation simulation

-v, --verbose         Verbose output (-vv for debug)
--json                Generate JSON report
--pdf                 Generate PDF report
--report-all          Generate all reports
--output-dir          Output directory (default: reports)

# Comprehensive scan with all checks
python main.py \
  --target http://localhost:3000/sse \
  --cve-check \
  --detect-patterns \
  --risk high \
  --report-all \
  -v

# Find popular MCP servers
python main.py --discover-github --max-results 100

# Analyze specific repositories
python main.py --discover-github | jq '.servers[] | select(.stars > 100)'

# Scan your local network
python main.py --discover-internet --target 192.168.1.0/24

# Scan common MCP ports on a host
python main.py --discover-internet --target localhost

# Scan multiple targets from file
for target in $(cat targets.txt); do
  python main.py --target "$target" --batch --json
done

MCPReconX/
├── main.py                    # CLI entry point
├── config.yaml               # Configuration with CVE signatures
├── requirements.txt          # Dependencies
├── install.sh               # Installation script
│
├── modules/                  # Core modules
│   ├── mcp_client.py        # Working MCP protocol client
│   ├── github_discovery.py  # GitHub MCP server discovery
│   ├── internet_discovery.py # Internet scanning
│   ├── cve_detector.py      # CVE detection engine
│   ├── attack_patterns.py   # Attack pattern detection
│   ├── scanner.py           # Active vulnerability scanning
│   ├── fingerprint.py       # Server fingerprinting
│   ├── detect_poison.py     # Tool poisoning detection
│   ├── exploit_sim.py       # Exploitation simulation
│   ├── report.py            # Report generation
│   └── utils.py             # Utilities
│
├── exploits/                 # PoC exploit templates
├── tampers/                  # Evasion scripts
├── logs/                     # Scan logs
└── reports/                  # Generated reports

┌─────────────────┐
│  1. Discovery   │ → GitHub/Internet/Local
└────────┬────────┘
         ▼
┌─────────────────┐
│  2. Validation  │ → Protocol detection
└────────┬────────┘
         ▼
┌─────────────────┐
│  3. Fingerprint │ → Implementation, version
└────────┬────────┘
         ▼
┌─────────────────┐
│  4. CVE Check   │ → Match known CVEs
└────────┬────────┘
         ▼
┌─────────────────┐
│  5. Patterns    │ → Attack pattern detection
└────────┬────────┘
         ▼
┌─────────────────┐
│  6. Active Scan │ → Vulnerability testing
└────────┬────────┘
         ▼
┌─────────────────┐
│  7. Exploit Sim │ → PoC simulation
└────────┬────────┘
         ▼
┌─────────────────┐
│  8. Reporting   │ → JSON/PDF reports
└─────────────────┘

======================================================================
MCPReconX Security Assessment Report
======================================================================
Target: http://localhost:3000/sse
Risk Rating: CRITICAL
Duration: 45.23 seconds
Safe Mode: Yes

CVEs Detected:
  [CRITICAL] CVE-2025-49596: MCP Inspector Unauthenticated RCE (CVSS: 9.4)
  [HIGH] CVE-2025-66416: DNS Rebinding Vulnerability (CVSS: 7.6)

Attack Patterns:
  [CRITICAL] Tool Poisoning Attack (TPA)
  [HIGH] Full Schema Poisoning (FSP)
  [MEDIUM] Excessive Agency

Vulnerabilities:
  Critical: 2
  High: 3
  Medium: 2
  Low: 1

Top Issues:
  - CVE-2025-49596: Unauthenticated RCE in MCP Inspector
  - Tool Poisoning in 'execute_code' tool
  - SSRF vulnerability in 'fetch_url' tool
======================================================================

{
  "report_metadata": {
    "tool": "MCPReconX",
    "version": "2.0.0",
    "generated_at": "2024-01-15T10:30:00"
  },
  "executive_summary": {
    "overall_risk_rating": "CRITICAL",
    "cves_detected": 2,
    "attack_patterns": 3,
    "vulnerabilities_found": 7
  },
  "cve_findings": [
    {
      "cve_id": "CVE-2025-49596",
      "name": "MCP Inspector Unauthenticated RCE",
      "cvss_score": 9.4,
      "severity": "critical"
    }
  ],
  "attack_patterns": [
    {
      "pattern_name": "Tool Poisoning Attack (TPA)",
      "severity": "critical",
      "affected_component": "tool:execute_code"
    }
  ],
  "scan_details": { ... }
}