High-risk tools in Pentester-MCP

dnscat_client

execute_weevely_module

identify_hash

john_prepare

Launches the graphical user interface (GTK) for XSSer.

objection_explore

run_403bypasser

run_addcomputer

run_aircrack_action

run_aix

run_alterx

run_amass

run_apktool

run_arachni

run_arjun

run_asnmap

run_atexec

run_autobloody

run_autorecon

run_awk

run_bbot

run_binwalk

run_bloodhound

run_bloodhound_automation

run_bloodyad

run_bruteforce_luks

run_bruteshark_analysis

run_cariddi

run_cdncheck

run_cero

run_certipy

run_cewl

run_changeme

run_cloud_enum

run_cloudlist

run_coercer

run_commix

run_corsy

run_crlfuzz

run_crunch

run_cupp

run_curl

run_dacledit

run_dalfox

run_describe_ticket

run_dig

run_dirb

run_dirsearch

run_dirstalk

run_dmitry

run_dnsenum

run_dnsrecon

run_dnsx

run_docker

run_dotdotpwn

run_dpapi

run_dpl4hydra

run_drupwn

run_dump_ntlm_info

run_emailharvester

run_enum4linux_ng

run_eyewitness

run_fatcat

run_fcrackzip

run_feroxbuster

run_ffuf

run_fierce

run_finalrecon

run_find

run_find_delegation

run_findomain

run_fping

run_gaia

run_gau

run_get_ad_computers

run_get_gpppassword

run_getadusers

run_getnpusers

run_getpac

run_getst

run_getuserspns

run_ghauri

run_git

run_gitleaks

run_gobuster

run_goldenpac

run_gospider

run_gowitness

run_graphw00f

run_grep

run_gunzip

run_hakrawler

run_hashcat

run_hashdeep

run_hashid

run_httpx

run_hydra

run_impacket_changepasswd

run_impacket_dcomexec

run_impacket_esentutl

run_impacket_exchanger

run_impacket_getarch

run_impacket_getlapspassword

run_impacket_gettgt

run_impacket_keylistattack

run_impacket_mimikatz

run_impacket_mssqlinstance

run_impacket_net

run_impacket_ping

run_impacket_ping6

run_impacket_reg

run_impacket_services

run_impacket_tstool

run_jadx

run_john

run_joomscan

run_jwt_tool

run_k8scan

run_katana

run_kerbrute

run_kiterunner

run_kubectl

run_kubernetes_task

run_lookupsid

run_lsassy

run_machine_role

run_mapcidr

run_masscan

run_medusa

run_mqtt_check

run_msfconsole

run_msfvenom

run_mssqlclient

run_naabu

run_nbtscan

run_ndiff

run_netcat_client

run_netdiscover_scan

run_nikto_scan

run_nmap

run_nmapautomator

run_nping

run_npm

run_ntfs_read

run_nuclei

run_nxc

run_onesixtyone

run_openredirex

run_owneredit

run_pacu

run_paramspider

run_passdetective

run_php

run_phpsploit

run_plumhound

run_psexec

run_pw_inspector

run_pwncat_scan

run_pywhisker

run_qsfuzz

run_qsreplace

run_raise_child

run_rbcd

run_rdp_check

run_recon_ng

run_rpcclient

run_rpcmap

run_sambapipe

run_scp

run_searchsploit

run_sherlock

run_shuffledns

run_sliver_action

run_smbclient

run_smbexec

run_smbmap

run_smtp_user_enum

run_smugglex

run_snmp_check

run_snmpwalk

run_spiderfoot

run_sprayhound

run_sqlmap

run_ssh_command

run_sslscan

run_ssrfmap

run_sstimap

run_subfinder

run_subjack

run_tar

run_tcpdump

run_theharvester

run_ticketer

run_tldfinder

run_tlsx

run_trivy

run_trufflehog

run_uncover

run_urlfinder

run_uro

run_username_anarchy

run_vulnx

run_wafw00f

run_wapiti

run_wfuzz

run_wget

run_whatweb

run_windapsearch

run_wmipersist

run_wmiquery

run_wp

run_wpprobe_scan

run_wpscan

run_xsser

run_xsstrike

run_xxexploiter

run_ysoserial

run_zip

split_pcap

start_autopsy

start_bruteshark_live

start_caido_service

start_certipy_relay

start_chisel_client

start_chisel_server

start_commix_session

start_dnscat2_server

start_docker_monitor

start_evil_winrm

start_goshs

start_gowitness_report_server

start_hashcat_session

start_impacket_sniff

start_interactsh_client

start_interactsh_server

start_jrmp_listener

start_k8scan_server

start_karmasmb

start_kubectl_port_forward

start_kubernetes_persistence

start_ligolo_proxy

start_mimikatz_interactive_session

start_mitm6

start_msf_handler

start_ncat_listener

start_netcat_listener

start_netdiscover_monitor

start_ntlmrelayx

start_php_server

Establishes a persistent, interactive connection to a pre-deployed PHP backdoor.

start_proxify

start_psexec_shell

start_pwncat_session

start_recon_ng_interactive

start_responder

start_smb_server

start_sniffer

start_spiderfoot_web

start_sqlmap_os_shell

start_ssh_tunnel

start_sshuttle

start_ssrfmap_handler

start_sstimap_interactive

start_tcpdump_capture

start_trivy_server

start_weevely_session

start_wireless_listener

Open an interactive PHP shell (REPL) within the context of the WordPress environment.

start_xfreerdp

Terminate a running Autopsy forensic server process using its PID.

Terminates a background Bruteshark live capture process.

Terminates a running Caido service process using its PID.

Terminate a background Certipy relay process.

Terminates a background Chisel server or client process using its PID.

Terminates a background Commix session (pseudo-shell or reverse shell handler)

Terminates a background dnscat process.

Terminates a background dnscat2-server process using its Process ID (PID).

Stop a background Docker monitoring process using its PID.

Terminates a running evil-winrm background session.

Terminates a long-running fping monitor process.

Terminates a background goshs server process using its PID.

Terminates a gowitness report server process.

Terminates a background hashcat session.

Terminates a background impacket-sniff process.

Terminates a running interactsh-client or interactsh-server process.

Terminates a background JRMP listener process.

Terminates a background k8scan server process.

Terminates a background impacket-karmaSMB server process.

Terminates a background kubectl process (like a port-forwarder) using its PID.

Terminate a background Kubernetes process (log stream or exec) using its PID.

Terminates a running ligolo-proxy process.

Terminate a background Mimikatz session.

Terminates a running mitm6 process using its Process ID (PID).

Terminates a background Metasploit handler process.

Terminates a background Ncat listener process.

Terminates a background Netcat listener process using its PID.

Terminates a background netdiscover monitoring process.

Terminates a background impacket-ntfs-read interactive exploration process.

Terminates a background ntlmrelayx process.

Terminates a backgrounded objection exploration session.

Terminate a background PHP development server using its Process ID (PID).

Terminates a background phpsploit session using its Process ID (PID).

Terminates a running proxify background process.

Terminates a background PSExec shell session.

Terminates a background pwncat session using its Process ID (PID).

Terminates a background recon-ng session using its PID.

Terminates a running Responder background process.

Terminates a background impacket-smbclient process.

Terminate a running Impacket SMB server process.

Terminates a background sniffing process using its Process ID (PID).

Terminates a background SpiderFoot web server process.

Terminates a background sqlmap os-shell process.

Terminates a background SSH tunnel or process.

Terminate a background sshuttle process.

Terminate a background ssrfmap handler process.

Terminates a background sstimap session using its PID.

Terminates a background tcpdump capture session using its Process ID (PID).

Terminate a background Trivy server process.

Terminates a background Weevely session.

Terminates a background wget process using its PID.

Terminates a background wireless process using its PID.

Terminates a background wp shell process by PID.

Terminates a running XFreeRDP session by its Process ID (PID).

Terminates a background XSSer GUI process using its PID.

Starts a continuous, long-running fping monitor against a target host.

generate_weevely_agent

manage_brew

manage_dirb_dictionaries

manage_mounts

manage_sliver_daemon

manage_wpprobe

objection_patch