Nobody Pentest Ultra MCP Server

150+ security tools with AI-powered analysis via Nobody AI backend.

MCP server yang menghubungkan Claude Code, GPT, Copilot, atau MCP-compatible agent dengan 150+ tools keamanan.

Features

150+ Security Tools

AI-Powered Analysis

• Tool Selection: AI selects the best tool for each task
• Parameter Optimization: AI optimizes tool parameters
• Attack Chain Discovery: AI finds attack paths
• Report Generation: AI creates professional pentest reports

Smart Features

• Auto-detect: Detects if tools are installed
• Graceful Fallback: Suggests installation for missing tools
• Caching: Smart result caching
• Timeout: Configurable timeouts

Quick Setup

Install

pip install nobody-pentest-ultra

Add to Claude Code

# First, find where nobody-pentest-ultra is installed
python -c "import nobody_pentest_ultra.server; print(nobody_pentest_ultra.server.__file__)"
# Output: C:\...\Lib\site-packages\nobody_pentest_ultra\server.py

# Then add to Claude Code using the full path
claude mcp add nobody-pentest-ultra -- python "C:\...\Lib\site-packages\nobody_pentest_ultra\server.py"

# With API key (external endpoints)
claude mcp add nobody-pentest-ultra -e NOBODY_API_KEY=sk-nobody-xxx -- python "C:\...\Lib\site-packages\nobody_pentest_ultra\server.py"

Note: Claude Code does not support python -m syntax. Use full path to server.py instead.

Add to OpenCode

Add to your opencode.json or opencode.jsonc project config:

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "nobody-pentest-ultra": {
      "type": "local",
      "command": ["npx", "-y", "nobody-pentest-ultra"],
      "enabled": true
    }
  }
}

If installed via pip (not npx), use python -m:

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "nobody-pentest-ultra": {
      "type": "local",
      "command": ["python", "-m", "nobody_pentest_ultra.server"],
      "enabled": true,
      "environment": {
        "NOBODY_API_KEY": "sk-nobody-xxx"
      }
    }
  }
}

Tip: OpenCode supports -m syntax, so python -m nobody_pentest_ultra.server works directly.

After adding the config, restart OpenCode. All 150+ security tools will be available as MCP tools.

Restart Claude Code

> Scan example.com for all vulnerabilities
> Perform full web app security test on target.com
> Enumerate subdomains for company.com

Usage Examples

Network Scanning

> Scan 192.168.1.1 for open ports and services
> Run masscan on 10.0.0.0/24
> Enumerate subdomains for example.com

Web Application Testing

> Test example.com for SQL injection
> Enumerate directories on target.com
> Scan for XSS vulnerabilities
> Check SSL/TLS configuration

Complete Pentest

> Perform full penetration test on example.com
> Run all security checks on target.com

Tool Installation

Why tools are not bundled

Nobody Pentest Ultra is a Python orchestration layer — it manages and executes 86+ industry-standard security tools. These tools are native binaries (C, Go, Rust, Java) maintained independently by their respective projects. Bundling them would mean:

• Size: 86 native binaries would exceed 5GB — PyPI limit is 100MB
• Platform lock: Each tool needs different compilation for Linux/macOS/Windows
• Stale versions: Bundled binaries wouldn't get security patches
• Dependency conflicts: Ghidra needs JDK 17, Masscan needs libpcap-dev, Nuclei needs Go 1.21+

This is the industry standard. Metasploit, Cobalt Strike, HexStrike AI — none bundle their tools.

Auto-Install Engine (recommended)

v3.0 includes a cross-platform auto-install engine. Set AUTO_INSTALL=true and tools are installed on-demand:

# Enable auto-install
export AUTO_INSTALL=true

# Tools will be installed automatically when first used:
# - nmap_scan -> apt install nmap / brew install nmap / choco install nmap
# - nuclei_scan -> go install nuclei@latest
# - sqlmap_scan -> pip install sqlmap
# - and 83 more...

The engine detects your OS and picks the right package manager — apt, brew, choco, winget, pacman, dnf, yum, pip, npm, go, cargo.

Manual Installation (optional)

Prefer full control? Install tools you need:

# === Recommended: Install all common tools at once ===
# Linux (Kali/Ubuntu)
curl -sL https://nobody0x.com/install-tools.sh | bash

# macOS
brew install nmap masscan nikto sqlmap binwalk radare2

# Windows (PowerShell as Admin)
choco install nmap masscan -y
pip install sqlmap

# === Or install per category ===
# Network Recon
apt install nmap masscan arp-scan dnsenum
go install github.com/owasp-amass/amass/v4/...@master
go install github.com/projectdiscovery/subfinder/v2/cmd/subfinder@latest

# Web Application
go install github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latest
go install github.com/projectdiscovery/httpx/cmd/httpx@latest
go install github.com/OJ/gobuster/v3@latest
pip install sqlmap wpscan wafw00f

# Authentication
apt install hydra john hashcat

# Binary Analysis
apt install radare2 gdb binwalk foremost steghide
pip install pwntools ROPgadget

# Cloud
pip install prowler checkov
go install github.com/aquasecurity/trivy/cmd/trivy@latest

# OSINT
pip install sherlock-cli social-analyzer
go install github.com/trufflesecurity/trufflehog/v3@latest

Check Installed Tools

# Dry-run: see which tools would be auto-installed
nobody-pentest-ultra --dry-run

Environment Variables

License

MIT License