Back to Home
zemi-gh icon

ctf-mcp-server

Verified Safe

by zemi-gh

Overview

Facilitate LLM assistance in Capture The Flag (CTF) challenges and cybersecurity training in a controlled lab environment.

Installation

Run Command
npm start

Security Notes

The server exposes powerful command-line tools (e.g., `radare2`, `pwntools`) and a Python sandbox, allowing LLMs to execute arbitrary Python code. While category-specific command execution is restricted to a strict whitelist of binaries, the Python sandbox is an explicit remote code execution vector. It is, however, designed and documented for use *only* in controlled CTF labs and sandboxes, with explicit warnings against use in production systems or untrusted networks. No `eval` in JavaScript code, no hardcoded secrets, and no unintended network exposures are apparent.

Similar Servers

Stats

Interest Score0
Security Score8
Cost ClassLow
Avg Tokens100
Stars0
Forks0
Last Update2025-11-29

Tags

CTFCybersecurityForensicsReverse EngineeringLLM Tools