exploitx@lab:~$ ./init --load-toolchain [ ok ] 86 tools [ ok ] mcp server [ ok ] solvers booting ExploitX
An autonomous, MCP-powered CTF-solving platform.
Turn a bare Linux box into a complete offensive-security lab — then let an AI agent reason over 86+ tools through the Model Context Protocol: recon, decode, decompile, exploit, and capture the flag.
$ python ctfkit/orchestrator.py --name "Baby RSA" --text "n=.. e=3 c=.." [orchestrator] category = crypto FLAG: NullOrigin{sm4ll_3_cub3_r00t} HOW: crypto/rsa-small-e $ python ctfkit/orchestrator.py --name "Hidden" --file chall.png [orchestrator] category = forensics FLAG: NullOrigin{lsb_st3g0_r3c0v3r3d} HOW: forensics/zsteg
An LLM plans multi-step attacks and calls real tools — recon, decompile, exploit — instead of running fixed playbooks.
Plug the server into Claude, Kiro, Cursor, or any MCP client. One standardized interface to the whole toolchain.
One install.sh provisions 86+ tools, a Python exploitation stack, wordlists, and payload libraries — reproducibly.
Crypto, rev, pwn, web, forensics — each with a dedicated solver and a strict flag detector that avoids false positives.
A Telegram upload → auto-solve → results daemon runs hands-off, around the clock.
The shell-capable MCP server binds to localhost only and is reached over an SSH tunnel — never the public internet.
SSTI · SQLi · LFI/RFI · SSRF · XXE · IDOR · JWT · CORS · deserialization
sqlmap · ffuf · feroxbuster · nuclei · dalfox · XSStrike · jwt_tool · arjun · commixRSA · XOR · classical · AES modes · ECC · hashes · lattice
RsaCtfTool · hashcat · john · pycryptodome · sympy · gmpy2 · z3decompile · symbolic exec · unpack · dynamic trace
ghidra · radare2 · gdb+pwndbg · angr · upx · ltrace · qemuBOF · ret2libc · ROP · format-string · heap
pwntools · ROPgadget · ropper · one_gadget · checksec · patchelf · seccomp-toolsmemory · disk · pcap · carving
volatility3 · tshark · binwalk · foremost · testdisk · bulk_extractorimage · audio · text · QR
zsteg · steghide · stegseek · outguess · stegoveritas · sox · zbarimg · stegsnowdecompile · smali · native .so
jadx · apktool · dex2jar · aapt · ghidrasubdomains · usernames · hosts
theHarvester · sherlock · amass · subfinder · shodanProvisioned by setup/install.sh on a fresh Ubuntu 22.04 (ARM64 or x86_64) box.
git clone https://github.com/Pranavkotame/ExploitX.git cd ExploitX sudo bash setup/install.sh # tools + python stack + wordlists bash setup/install_mcp.sh # MCP server (systemd, localhost)
# on your laptop ssh -N -L 8080:127.0.0.1:8080 user@your-server # mcp.json { "mcpServers": { "exploitx": { "url": "http://127.0.0.1:8080/mcp", "headers": { "Authorization": "Bearer <TOKEN>" } } } }
python ctfkit/orchestrator.py --name "Chal" --text "n=.. e=.. c=.." python ctfkit/orchestrator.py --name "Chal" --file ./binary python ctfkit/orchestrator.py --name "Chal" --url https://target/
Three clean layers — an AI agent, a thin MCP interface, and the lab underneath.
Claude · Kiro · Cursor · any MCP client — plans attacks, reads output, decides the next move.
13 tools · bearer auth · localhost-only
