Labsco
MCP SERVER

Metasploit MCP Server

by GH05TCREW

Drive the Metasploit Framework from the conversation — search modules, run exploits, manage sessions and handlers.

Vulnerability Scanning & Application Security
Summary
A natural-language interface to a full Metasploit workflow, for authorized security testing.

The tools cover the arc of an engagement — search, exploit, session, post-exploitation, handler — so an agent can look up a module, run it against a target, and work the resulting session, with the standing caution that this is live exploitation tooling meant only for authorized environments.

What it is

A server that bridges an assistant to the Metasploit Framework, exposing its penetration-testing workflow as tools: find modules, run exploits and auxiliary and post modules, generate payloads, and manage sessions and listeners.

What you get
  • list_exploits and list_payloads search exploit and payload modules, with platform and architecture filters
  • run_exploit configures and runs an exploit with an optional check first; run_auxiliary_module and run_post_module run auxiliary and post-exploitation modules; generate_payload writes payload files
  • Session management: list_active_sessions, send_session_command, and terminate_session
  • Handler management: list_listeners, start_listener, and stop_job
Requirements

Metasploit Framework installed with its RPC service running, and Python. It exposes powerful exploitation features — use only where you have explicit authorization to test.