HackTricks MCP Server
Connects Claude directly to the HackTricks pentesting knowledge base through seven search and extraction tools. Instead of hunting through GitHub, you can ask Claude for SQL injection techniques or SUID exploitation commands and get back grouped search results, page outlines, specific sections, or just the code blocks. The quick_lookup tool handles common attacks through aliases like sqli, xss, and ssrf, collapsing what would be multiple searches into one call. Uses ripgrep under the hood for speed and includes protections against path traversal. Useful when you're mid-assessment and need to pull specific attack patterns or enumeration commands without context switching to a browser. The section extraction is smart about token efficiency, letting you grab just the SUID chapter instead of an entire privilege escalation guide.
- GitHub stars
- 7
- tools
- 7
- transport
- STDIO
- last updated
- Dec 27, 2025
Tools
7 toolsPublic tool metadata for what this MCP can expose to an agent.
hacktricks_quick_lookupOne-shot exploitation lookup. Searches, finds best page, and returns exploitation sections + code blocks in one call.
One-shot exploitation lookup. Searches, finds best page, and returns exploitation sections + code blocks in one call.
No parameter schema in public metadata yet.
search_hacktricksSearch through HackTricks documentation. Returns results grouped by file with match count, page title, and relevant section headers.
Search through HackTricks documentation. Returns results grouped by file with match count, page title, and relevant section headers.
No parameter schema in public metadata yet.
get_hacktricks_outlineGet the table of contents of a page (all section headers).
Get the table of contents of a page (all section headers).
No parameter schema in public metadata yet.
get_hacktricks_sectionExtract a specific section from a page by header name.
Extract a specific section from a page by header name.
No parameter schema in public metadata yet.
get_hacktricks_cheatsheetExtract only code blocks from a page.
Extract only code blocks from a page.
No parameter schema in public metadata yet.
get_hacktricks_pageGet full content of a HackTricks page.
Get full content of a HackTricks page.
No parameter schema in public metadata yet.
list_hacktricks_categoriesList categories and their contents.
List categories and their contents.
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageReadme
HackTricks MCP Server
MCP (Model Context Protocol) server for searching and querying HackTricks pentesting documentation directly from Claude.
Features
- Quick lookup - One-shot exploitation info with alias support (sqli, xss, ssrf, etc.)
- Grouped search results - Results aggregated by file with match count, title, and relevant sections
- Page outline - Quick table of contents to identify relevant sections
- Section extraction - Read specific sections instead of full pages (token-efficient)
- Cheatsheet mode - Extract only code blocks/commands from pages
- Category browsing - Discover available topics and file paths
- Fast grep search - Uses ripgrep for instant results
- Security hardened - Protection against command injection and path traversal
Quick Start
Installation
npm install -g hacktricks-mcp-server
The postinstall script automatically clones the HackTricks repository (~2 minutes on first install).
Configure Claude Desktop
Add to your Claude settings (~/.claude/settings.json):
Details
- Repository
- github.com/xplo8e/hacktricks-mcp-server
- Website
- github.com/Xplo8E/hacktricks-mcp-server
- Category
- Search & Web Crawling
- Package
hacktricks-mcp-server- Transport
- STDIO
- Registry
- MCP registry, active
Related Search & Web Crawling MCP servers
View all
ChangeThisFileaadilr/changethisfile-mcp1,000+ conversion routes plus translate, extract tables, compress. 25 free/month, then a free key.6stars
HasData Amazonhasdata/amazon-mcpAmazon keyword search, product details, seller profiles and seller catalogues, as structured JSON.6starsHasData Walmarthasdata/walmart-mcpWalmart search, product pages and customer reviews on walmart.com and walmart.ca, as JSON.6stars
Rendex: Rendering API for Images, PDFs & Content Extractioncopperline-labs/rendex-mcpRender HTML, Markdown, or URLs to images, PDF, or branded artifacts; extract and watch pages.6stars
Libofcongress Mcp Servercyanheads/libofcongress-mcp-serverSearch LOC digital collections, Chronicling America newspapers (full OCR), and LC Subject Headings.6starsWikipedia Mcp Servercyanheads/wikipedia-mcp-serverSearch and read Wikipedia articles and sections, list cited references, nearby pages, and languages.6stars