mcpField
H
hacktricks-mcp

hacktricks-mcp

Local
github.com/zebbernSecurity3Updated 1d ago
Repository

About hacktricks-mcp

hacktricks-mcp is a read-only MCP server for searching and retrieving sections from the HackTricks offensive-security wiki. Its packaged SQLite FTS5 index supports offline queries without cloning the wiki or accessing the network at query time.

Key features

  1. 01Offline full-text wiki search
  2. 02Ranked results with snippets
  3. 03Category filters and abbreviation handling
  4. 04Retrieve pages, sections, or code blocks
  5. 05Browse the wiki table of contents

Use cases

  1. 01Search HackTricks during authorized security testing
  2. 02Retrieve a specific wiki section or code block
  3. 03Locate topics using abbreviations

MCP support

It exposes read-only search, page retrieval, and table-of-contents tools to MCP clients. The packaged index is refreshed from upstream every three days.

Configuration

Local server config is the same for every client. Copy it into your client’s MCP config file.

mcp.json · Universal config
{
  "mcpServers": {
    "zebbern-hacktricks": {
      "command": "npx",
      "args": [
        "-y",
        "@zebbern/hacktricks-mcp"
      ]
    }
  }
}
Run commandnpx -y @zebbern/hacktricks-mcp

Local servers need a runtime on your machine (e.g. Node.js 18+). Config file locations differ by client; see your client’s docs.

Packages
npm@zebbern/hacktricks-mcp0.1.5

Tools

3

Saved tool list · updated 2w ago

ParameterTypeRequiredDescription
limitintegerNoMax results (default 10)
querystringYesSearch terms, e.g. 'docker escape' or 'asreproast'
categorystringNoOptional category filter (substring match), e.g. 'Windows Hardening' or 'Pentesting Web'

Details

From the project README

hacktricks-mcp

MCP server that gives AI agents fast, offline full-text search and section-level retrieval over the HackTricks offensive-security wiki.

Unlike grep-based alternatives, this server ships with a pre-built SQLite FTS5 search index (1,000+ pages) inside the package. No install-time clone, no ripgrep dependency, no network access at query time. A GitHub Action re-syncs the index with upstream every 3 days and commits it back to this repo.

Quick start

Requirements: Node.js 22.13 or newer (uses the built-in node:sqlite, zero native dependencies).

Claude Code:

claude mcp add hacktricks -- npx -y @zebbern/hacktricks-mcp

Codex CLI:

codex mcp add hacktricks -- npx -y @zebbern/hacktricks-mcp

Any MCP client (Claude Desktop, Cursor, Kimi, etc.), config JSON:

{
  "mcpServers": {
    "hacktricks": {
      "command": "npx",
      "args": ["-y", "@zebbern/hacktricks-mcp"]
    }
  }
}

As a plugin (bundles the agent skill that teaches efficient usage): this repo is a valid plugin for Claude Code (.claude-plugin/), Codex (.codex-plugin/) and Kimi (kimi-plugin/). Add it from your client's plugin marketplace flow pointing at zebbern/hacktricks-mcp, or for Kimi Work use this plugin link.

Then ask things like:

  • "Search HackTricks for kerberoast and give me the attack commands"
  • "How do I escalate privileges from the lxd group?"
  • "Show me the SSRF section of the pentesting-web pages"

Tools at a glance

ToolWhat it does
hacktricks_searchRanked full-text search with snippets, category filter and abbreviation handling (privesc, sqli, rce, ...)
hacktricks_get_pageRead a page, a single section, or just its code blocks
hacktricks_get_tocThe wiki category tree, so agents can see where topics live

All tools are strictly read-only. Full reference: docs/tools.md.

Documentation

Security and legal

  • The server executes nothing from the wiki; it is a read-only search interface. All queries are parameterized, and user input is escaped before query construction.
  • HackTricks content is offensive-security reference material. Use it only on systems you are authorized to test.
  • Content belongs to HackTricks / Carlos Polop and contributors; this repo contains derived index data plus original server code (MIT).

Credits

Comments

Markdown supported

New to MCP?

From what the protocol is to installing your first server, these answers cover most first questions.

An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.