AI导哈

安全测试工具集成

通过Claude AI集成专业渗透测试工具（如Nmap、Nikto、SQLmap等），支持自然语言交互进行安全扫描和漏洞检测。

  • by SamTesura
  • Python
  • 本地部署
  • 4 星标
  • 更新于
在 GitHub 查看 SamTesura/claude-security-tools

使用说明

Claude Security Tools

Run professional security testing tools (Nmap, Nikto, SQLmap, WPScan, and more) directly through Claude AI using MCP (Model Context Protocol) on Windows 11 + WSL 2 + Kali Linux.

⚠️ FOR EDUCATIONAL AND AUTHORIZED SECURITY TESTING ONLY

🎯 Overview

This project provides a fully-configured MCP server that integrates professional penetration testing tools with Claude AI. Chat with Claude to run security scans, enumerate systems, search for exploits, and more - all through natural language.

What is MCP?

Model Context Protocol (MCP) allows Claude to interact with external tools and systems. This server wraps security testing tools in an MCP interface, giving Claude the ability to run real pentesting commands on your behalf.

What's New in v1.1.0

Security-hardening release. Highlights:

  • Fail-closed scope — the server refuses to start without a scope allowlist unless MCP_SCOPE_MODE=audit is explicitly set; targets/URLs outside MCP_SCOPE_FILE are rejected before any tool runs (CIDR/range containment, fully-anchored URL matching).
  • Argument-injection hardening — every tool builds a strict argv (never a shell); nmap scan-type/timing are allow-listed and leading-dash tokens are rejected, closing an nmap --script=… code-execution vector.
  • Secret redaction — WPScan API tokens and URL credentials are redacted before scans are written to the SQLite history.
  • Restrictive artifacts — results directory 0700; hash files, Metasploit RC files and the scan DB 0600; unique, collision-free filenames.
  • Least-privilege container — no privileged; cap_drop: ALL + cap_add: NET_RAW + no-new-privileges (nmap's redundant file capabilities are stripped so SYN scans still work as root).
  • Reliability — bounded, lenient-decoded tool output; per-process-group timeout cleanup; blocking scans offloaded so the server stays responsive.

See Security Features below for details.

✨ Features

🛠️ Security Tools Included

  • Nmap - Network scanning and port discovery
  • Nikto - Web server vulnerability scanning
  • SQLmap - SQL injection detection and exploitation
  • WPScan - WordPress vulnerability scanner
  • Dirb - Web directory brute-forcing
  • Searchsploit - Exploit-DB search
  • Metasploit - Penetration testing framework
  • Hydra - Network password cracker
  • John the Ripper - Password hash cracker

🔑 Key Capabilities

✅ Basic & Advanced Modes - Simple defaults for quick scans, full control for experts
✅ Stealth Scanning - Low-noise, IDS-evasion techniques
✅ Result Persistence - SQLite database + file storage (secrets redacted, 0600 artifacts)
✅ Fail-Closed Scope - Targets outside your allowlist are rejected before any tool runs
✅ Input Sanitization - Strict argv construction, no attacker-controlled flags
✅ Least-Privilege Container - No privileged, drops all caps except NET_RAW
✅ Formatted Output - Raw output + parsed structured data

📋 Prerequisites

Required Software

  • Windows 11 (with virtualization enabled)
  • WSL 2 (Windows Subsystem for Linux 2)
  • Kali Linux (via Microsoft Store)
  • Docker Desktop for Windows (with WSL 2 backend)
  • Claude Desktop (with MCP support)

System Requirements

  • 8GB RAM minimum (16GB recommended)
  • 20GB free disk space
  • Admin privileges on Windows

🚀 Quick Start

1. Install WSL 2 + Kali Linux

From Windows PowerShell (Administrator):

# Enable WSL
wsl --install

# Restart computer when prompted

# Install Kali Linux
wsl --install -d kali-linux

# Verify installation
wsl -l -v

2. Install Docker Desktop

  1. Download Docker Desktop for Windows
  2. Install and enable WSL 2 backend
  3. Go to Settings → Resources → WSL Integration
  4. Enable integration with kali-linux
  5. Click Apply & Restart

3. Clone This Repository

From Kali Linux WSL:

# Open Kali WSL
wsl -d kali-linux

# Navigate to home directory
cd ~

# Clone the repository
git clone https://github.com/samtesura/claude-security-tools.git
cd claude-security-tools

# Make setup script executable
chmod +x setup.sh

4. Run Setup

# Run the automated setup script
./setup.sh

The setup script will:

  • ✅ Check Docker Desktop integration
  • ✅ Create necessary directories
  • ✅ Build the Kali Linux container (~10-15 minutes)
  • ✅ Configure environment variables
  • ✅ Start the MCP server
  • ✅ Verify installation

5. Configure Claude Desktop

Edit Claude Desktop config:

Windows path: %APPDATA%\Claude\claude_desktop_config.json

Add this to your MCP servers:

{
  "mcpServers": {
    "security-testing": {
      "command": "wsl",
      "args": [
        "-d",
        "kali-linux",
        "--exec",
        "docker",
        "exec",
        "-i",
        "mcp-security-server",
        "python3",
        "/root/mcp_security_server.py"
      ],
      "env": {
        "SCAN_DB_PATH": "/data/scans.db",
        "RESULTS_PATH": "/data/results"
      }
    }
  }
}

6. Restart Claude Desktop

  1. Completely close Claude Desktop
  2. Reopen Claude Desktop
  3. Check the 🔌 icon - you should see "security-testing" connected

7. Start Scanning!

Ask Claude:

  • "Run an nmap scan on 192.168.1.1"
  • "Scan my network 192.168.1.0/24 for web servers"
  • "Check if example.com has any web vulnerabilities with Nikto"
  • "Search for WordPress exploits"

📖 Documentation

🎓 Usage Examples

Network Scanning

You: "Run a fast nmap scan on 192.168.1.0/24"
Claude: [Executes nmap -F -T2 192.168.1.0/24 and shows results]

Web Vulnerability Scanning

You: "Scan https://testsite.local for vulnerabilities"
Claude: [Runs Nikto scan and provides detailed findings]

WordPress Security Audit

You: "Check if wordpress-site.com has vulnerable plugins"
Claude: [Executes WPScan with enumeration and shows results]

Exploit Research

You: "Search for Apache 2.4.49 exploits"
Claude: [Queries Exploit-DB and shows available exploits]

🔒 Security & Legal

⚠️ Legal Disclaimer

THIS TOOL IS FOR AUTHORIZED SECURITY TESTING AND EDUCATIONAL PURPOSES ONLY.

You must:

  • ✅ Only test systems you own or have explicit written permission to test
  • ✅ Comply with all applicable laws and regulations
  • ✅ Never use these tools for malicious purposes
  • ✅ Understand that unauthorized access to computer systems is illegal

The authors are not responsible for any misuse or damage caused by this software.

🛡️ Security Features

  • Fail-Closed Scope Enforcement - Every target/URL is checked against a JSON allowlist (MCP_SCOPE_FILE) before a tool runs. With no scope file the server refuses to start unless you explicitly set MCP_SCOPE_MODE=audit. CIDRs and ranges are matched by containment.
  • Argument-Injection Hardening - All inputs are built into argv lists (never a shell); leading-dash tokens are rejected and nmap scan/timing flags are allowlisted, so a target/param can't smuggle a --script/-oN flag.
  • Secret Redaction - The WPScan API token and URL credentials are redacted before scan commands are written to scans.db.
  • Restrictive Artifacts - Results dir is 0700; hash files, Metasploit RC files, and scans.db are 0600.
  • Least-Privilege Container - Runs without privileged, cap_drop: ALL + cap_add: NET_RAW, no-new-privileges.
  • Bounded & Responsive - Output is capped, subprocesses run in their own process group (killed cleanly on timeout), and blocking scans are offloaded so the server stays responsive.
  • Audit Trail - All scans logged to SQLite database.

🗂️ Project Structure

claude-security-tools/
├── mcp_security_server.py    # Main MCP server (Python + FastMCP)
├── Dockerfile                 # Kali Linux container definition
├── docker-compose.yml         # Container orchestration
├── setup.sh                   # Automated setup script
├── .env.template             # Environment variables template
├── LICENSE                    # MIT License
├── README.md                  # This file
├── data/                     # Persistent data (created by setup)
│   ├── scans.db             # SQLite database
│   └── results/             # Scan output files
└── docs/                    # Documentation
    └── INSTALLATION.md      # Detailed installation guide

💾 Data Management

Viewing Results

From WSL:

cd ~/claude-security-tools
ls -lh data/results/
cat data/results/nmap_*.txt

From Windows: Press Win+R, type: \\wsl$\kali-linux\home\<username>\claude-security-tools\data\results

Backup to Windows Desktop

cp -r data "/mnt/c/Users/<your-username>/Desktop/security-backup-$(date +%Y%m%d)"

🤝 Contributing

Contributions are welcome! Please read CONTRIBUTING.md for guidelines.

📜 License

This project is licensed under the MIT License - see the LICENSE file for details.

🙏 Acknowledgments

Made with ❤️ for ethical hackers and security professionals

Remember: With great power comes great responsibility. Use these tools ethically and legally.

相关 MCP