HackTricks MCP Server

Connects Claude directly to the HackTricks pentesting knowledge base through seven search and extraction tools. Instead of hunting through GitHub, you can ask Claude for SQL injection techniques or SUID exploitation commands and get back grouped search results, page outlines, specific sections, or just the code blocks. The quick_lookup tool handles common attacks through aliases like sqli, xss, and ssrf, collapsing what would be multiple searches into one call. Uses ripgrep under the hood for speed and includes protections against path traversal. Useful when you're mid-assessment and need to pull specific attack patterns or enumeration commands without context switching to a browser. The section extraction is smart about token efficiency, letting you grab just the SUID chapter instead of an entire privilege escalation guide.