mcpField
M
Mythic MCP

Mythic MCP

Local
github.com/xpnSecurity80Updated 84w ago
Repository

About Mythic MCP

Mythic MCP is a proof-of-concept project that exposes the Mythic command and control framework as an MCP server for LLMs. It is aimed at security researchers who want to demonstrate LLM use in authorized penetration testing. The README offers only a brief Claude Desktop setup example.

Key features

  1. 01Wraps Mythic functionality as an MCP server
  2. 02Runs with uv and Python
  3. 03Connects to Claude Desktop and other MCP clients

Use cases

  1. 01Demonstrating LLM use of Mythic in authorized pentests
  2. 02Researching LLM-driven threat emulation workflows

MCP support

This project is an MCP server that exposes Mythic capabilities to MCP clients such as Claude Desktop for use by LLMs.

#mythic-mcp#mcp-server#pentesting

Configuration

Local server config is the same for every client. Copy it into your client’s MCP config file.

No install method listed yet

We haven’t collected a package or remote endpoint for this server. Follow the instructions in the project README.

Repository

Tools

No tool list yet

Local servers expose tools only once running on your machine, and the maintainer has not provided a tool list.

Details

From the project README

Mythic MCP

A quick MCP demo for Mythic, allowing LLMs to pentest on our behalf!

Requirements

  1. uv
  2. python3
  3. Claude Desktop (or other MCP Client)

Usage with Claude Desktop

To deploy this MCP Server with Claude Desktop, you'll need to edit your claude_desktop_config.json to add the following:

{
    "mcpServers": {
        "mythic_mcp": {
            "command": "/Users/xpn/.local/bin/uv",
            "args": [
                "--directory",
                "/full/path/to/mythic_mcp/",
                "run",
                "main.py",
                "mythic_admin",
                "mythic_admin_password",
                "localhost",
                "7443"
            ]
        }
    }
}

Once done, kick off Claude Desktop. There are sample prompts to show how to task the LLM, but really anything will work along the lines of:

You are an automated pentester, tasked with emulating a specific threat actor. The threat actor is APT31. Your objective is: Add a flag to C:\win.txt on DC01. Perform any required steps to meet the objective, using only techniques documented by the threat actor.

Comments

Markdown supported

New to MCP?

From what the protocol is to installing your first server, these answers cover most first questions.

An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.