M
MorDavid/ExternalAttacker-MCP
Map an external attack surface for recon and bug bounty
View on GitHub ↗Link checked 2026-11-12 · HTTP 200 · opens the vendor's own site
Install & config
Install command from the repository
go install github.com/OJ/gobuster/v3@latest
Parsed from the README we fetched on 2026-11-05; we have not executed it.
This is the install method the repository states, not an MCP client config, so no JSON is generated.
Key names differ by client: Clients & CLI
- Source
- collected from the abordage/awesome-mcp list · type: MCP server
- Harvest history
- first seen 2026-11-05 · last seen 2026-11-14 · seen 10× · listed by 10 sources
- Score
- score 1,003 · 10 sources · mcp
- Install
go install github.com/OJ/gobuster/v3@latest
FAQ (answers come from our records)
How do I install it?
The repository provides this install command:
go install github.com/OJ/gobuster/v3@latest. It comes from the repository itself; we cannot guarantee it runs as-is in your client.Who is it for?
We filed it under these tags: MCP 服务. The tags come from the entry itself, not a taxonomy we imposed.
Who maintains it?
first catalogued 2026-11-05；last seen 2026-11-14。There is no official certification or quality rating here — we record sources and dates only.
# ExternalAttacker MCP Server
以下摘录自该仓库的 README（片段） · 在 GitHub 读完整 README →
## Model Context Protocol (MCP) Server for External Attack Surface Management
ExternalAttacker is a powerful integration that brings automated scanning capabilities with natural language interface for comprehensive external attack surface management and reconnaissance.
> 🔍 Automated Attack Surface Management with AI!
> Scan domains, analyze infrastructure, and discover vulnerabilities using natural language.
## 🔍 What is ExternalAttacker?
ExternalAttacker combines the power of:
Automated Scanning: Comprehensive toolset for external reconnaissance
Model Context Protocol (MCP): An open protocol for creating custom AI tools
Natural Language Processing: Convert plain English queries into scanning commands
## 📱 Community
Join our Telegram channel for updates, tips, and discussion:
Telegram: https://t.me/rootsec
## ✨ Features
Natural Language Interface: Run scans using plain English
Comprehensive Scanning Categories:
🌐 Subdomain Discovery (subfinder)
🔢 Port Scanning (naabu)
🌍 HTTP Analysis (httpx)
🛡️ CDN Detection (cdncheck)
🔐 TLS Analysis (tlsx)
📁 Directory Fuzzing (ffuf, gobuster)
📝 DNS Enumeration (dnsx)
## 📋 Prerequisites
Python 3.8 or higher
Go (for installing tools)
MCP Client
## 🔧 Installation
1. Clone this repository:
bash
git clone https://github.com/mordavid/ExternalAttacker-MCP.git
cd ExternalAttacker
2. Install Python dependencies:
bash
pip install -r requirements.txt
3. Install required Go tools:
bash
go install -v github.com/projectdiscovery/subfinder/v2/cmd/subfinder@latest
go install -v github.com/projectdiscovery/naabu/v2/cmd/naabu@latest
go install -v github.com/projectdiscovery/httpx/cmd/httpx@latest
go install -v github.com/projectdiscovery/cdncheck/cmd/cdncheck@latest
go install -v github.com/projectdiscovery/tlsx/cmd/tlsx@latest
go install -v github.com/ffuf/ffuf@latest
go install github.com/OJ/gobuster/v3@latest
go install -v github.com/projectdiscovery/dnsx/cmd/dnsx@latest
4. Run ExternalAttacker-App.py
bash
python ExternalAttacker-App.py
# Access http://localhost:6991
5. Configure the MCP Server
bash
"mcpServers": {
"ExternalAttacker-MCP": {
"command": "python",
"args": [
" \\ExternalAttacker-MCP.py"
## 🚀 Usage
Example queries you can ask through the MCP:
"Scan example.com for subdomains"
ExternalAttacker is a powerful integration that brings automated scanning capabilities with natural language interface for comprehensive external attack surface management and reconnaissance.
> 🔍 Automated Attack Surface Management with AI!
> Scan domains, analyze infrastructure, and discover vulnerabilities using natural language.
## 🔍 What is ExternalAttacker?
ExternalAttacker combines the power of:
Automated Scanning: Comprehensive toolset for external reconnaissance
Model Context Protocol (MCP): An open protocol for creating custom AI tools
Natural Language Processing: Convert plain English queries into scanning commands
## 📱 Community
Join our Telegram channel for updates, tips, and discussion:
Telegram: https://t.me/rootsec
## ✨ Features
Natural Language Interface: Run scans using plain English
Comprehensive Scanning Categories:
🌐 Subdomain Discovery (subfinder)
🔢 Port Scanning (naabu)
🌍 HTTP Analysis (httpx)
🛡️ CDN Detection (cdncheck)
🔐 TLS Analysis (tlsx)
📁 Directory Fuzzing (ffuf, gobuster)
📝 DNS Enumeration (dnsx)
## 📋 Prerequisites
Python 3.8 or higher
Go (for installing tools)
MCP Client
## 🔧 Installation
1. Clone this repository:
bash
git clone https://github.com/mordavid/ExternalAttacker-MCP.git
cd ExternalAttacker
2. Install Python dependencies:
bash
pip install -r requirements.txt
3. Install required Go tools:
bash
go install -v github.com/projectdiscovery/subfinder/v2/cmd/subfinder@latest
go install -v github.com/projectdiscovery/naabu/v2/cmd/naabu@latest
go install -v github.com/projectdiscovery/httpx/cmd/httpx@latest
go install -v github.com/projectdiscovery/cdncheck/cmd/cdncheck@latest
go install -v github.com/projectdiscovery/tlsx/cmd/tlsx@latest
go install -v github.com/ffuf/ffuf@latest
go install github.com/OJ/gobuster/v3@latest
go install -v github.com/projectdiscovery/dnsx/cmd/dnsx@latest
4. Run ExternalAttacker-App.py
bash
python ExternalAttacker-App.py
# Access http://localhost:6991
5. Configure the MCP Server
bash
"mcpServers": {
"ExternalAttacker-MCP": {
"command": "python",
"args": [
" \\ExternalAttacker-MCP.py"
## 🚀 Usage
Example queries you can ask through the MCP:
"Scan example.com for subdomains"
Listed badge (optional)
Copy this line into the README if you want the listing mark. Optional, and it does not affect being listed.
[](https://anclum.com/en/s/mordavid-externalattacker-mcp/)
- Source
- awesome · https://github.com/MorDavid/ExternalAttacker-MCP
- Browse by field
- MCP servers
- Listed by
- 10 independent sources
- added
- today
More like this
Filed under
Every tag opens the full list for that filter. Counts are the live catalogue figures.