wallieinformal201/pentest-mcp-server

tools

• authorized_use_reminder

  field rendered as the first line of every response so the framing reaches all clients

• detection_note

  included in every response — how defenders detect encoded payload variants — preserving the dual-audience framing

• nextToolSuggestions

  pre-filled with payload generator and ATT&CK lookup calls from the methodology context

• pentest_analyze_response

  Analyzes a raw server response (headers + body) from authorized probing for information leakage, fingerprinting signals, and exploitation opportunities — each finding paired with remediation.

• pentest_encode

  Applies an encoding chain to a payload string (URL, double-URL, HTML entity, Unicode, hex, Base64, and more). Returns step-by-step decode explanation and bypass rationale.

• pentest_generate_payloads

  Generates annotated payload templates for authorized testing. Each template includes why it works in the injection context, detection signatures, and mitigations.

• pentest_guide

  Returns a step-by-step methodology playbook for the given attack vector, scoped to authorized testing. Each phase covers what to look for, tools, detection indicators for defenders, and mitigations.

• pentest_lookup_technique

  Looks up a MITRE ATT&CK technique by ID or keyword. Returns description, tactics, detection data sources, behavioral indicators, mitigations, and real-world procedure examples.

• pentest_map_techniques

  Given a target profile (stack, services, auth type, OS), returns ranked ATT&CK techniques and OWASP test cases most relevant to that authorized engagement.