Developer Tools · Security

project_astro logo

project_astro

whit3rabbit0/project_astro

Intelligence layer for LLM-driven penetration testing. Ships as an MCP server with 38 Kali tool wrappers, engagement tracking, scope enforcement, and structured output for any MCP-compatible client.

Install

Client configuration

{
  "mcpServers": {
    "astro": {
      "command": "astro",
      "args": [
        "serve",
        "--transport",
        "stdio"
      ]
    }
  }
}

Environment variables

API_KEY
GitHub stars
4
Category
Developer Tools, Security
License
MIT
Updated
Oct 6, 2026

About project_astro

This is a devkit. Use only against targets you own or have explicit authorization to test.

Tools (32)

  • nmap

    Network scanner with structured output parsing

  • gobuster

    Directory/DNS/vhost brute-forcer

  • dirb

    Web content scanner

  • nikto

    Web server vulnerability scanner

  • wpscan

    WordPress vulnerability scanner

  • enum4linux

    Windows/Samba enumeration

  • subfinder

    Passive subdomain discovery

  • amass

    Attack surface mapping

  • ffuf

    Web fuzzer

  • whatweb

    Technology fingerprinting

  • dnsrecon

    DNS reconnaissance

  • theharvester

    OSINT email/subdomain harvesting

  • nuclei

    Template-based vulnerability scanner

  • sqlmap

    SQL injection tester with DB enumeration

  • metasploit

    Exploitation framework (msfconsole)

  • hydra

    Network login brute-forcer

  • john

    Password cracker

  • hashcat

    GPU-accelerated password cracker

  • searchsploit

    Exploit-DB local search

  • crackmapexec

    Network protocol attack tool

  • responder

    LLMNR/NBT-NS/mDNS poisoner

  • smbclient

    SMB client

  • evil-winrm

    WinRM shell

  • impacket_secretsdump

    SAM/LSA/NTDS credential extraction

  • impacket_psexec

    Remote command execution via SMB

  • impacket_wmiexec

    Remote command execution via WMI

  • impacket_kerberoast

    SPN-based Kerberos ticket extraction

  • impacket_getnpusers

    AS-REP roasting

  • impacket_getst

    Service ticket requests

  • impacket_ticketer

    Silver/golden ticket forging

  • Post-exploitation

  • custom_script

    Run arbitrary bash/python with timeout sandbox

Details on this page are taken from the project's README. Open README

Supported clients

Clients mentioned in this server's README:

View all
Claude Desktop logo

Claude Desktop

Desktop · Freemium · Proprietary

Anthropic's official Claude AI desktop application. Supports MCP servers to extend functionality.

WindowsMacOS

Related MCP servers

More servers
Playwright logo

Playwright

microsoft/playwright

72.2k

Playwright is a framework for web automation and testing. It drives Chromium, Firefox, and WebKit with a single API — in your tests, in your scripts, and as a tool for AI agents.

Developer Tools
repomix logo

repomix

yamadashy/repomix

15.2k

Repomix is a tool that packs a codebase into an AI-friendly format, supporting local and remote repository processing and providing code compression, security checks and multiple output formats.

Developer Tools
UI-TARS-desktop logo

UI-TARS-desktop

bytedance/UI-TARS-desktop

12.9k

TARS is ByteDance's multimodal AI agent stack, shipping two projects: Agent TARS (a CLI and Web UI agent built on MCP) and UI-TARS-desktop (a desktop GUI agent).

Developer Tools
blender logo

blender

ahujasid/blender-mcp

10.6k

formerly blender-mcp — the PyPI package is now mcp-for-blender. Existing setups keep working; no config change is required. Read more.

Developer Tools
Playwright Browser Automation logo

Playwright Browser Automation

microsoft/playwright-mcp

9.2k

A Model Context Protocol (MCP) server that provides browser automation capabilities using Playwright. This server enables LLMs to interact with web pages through structured accessibility snapshots, bypassing the need for screenshots or visually-tuned models.

Developer Tools
2344 logo

2344

comet-ml/opik

7k

Opik is the open-source LLM observability and evaluation platform for AI agent tracing, LLM evaluation, prompt management, and production monitoring. Built by Comet. Apache-2.0 licensed, free to self-host the full platform, with 20,000+ GitHub stars.

Developer Tools