Mcp Pwntools

io.github.daedalusPublished by GitHub account daedalusv0.1.0Updated Oct 24, 2026

MCP server exposing pwntools 4.15.0 functionality for binary exploitation

VerifiedSTDIODesktop onlyDeveloper ToolsSecurity & Monitoring

Overview

AI-generated overview

A local MCP server that exposes pwntools 4.15.0 so an assistant can pack data, assemble code, build shellcode, inspect ELF files and craft binary exploits.

What you can do
Pack and unpack integers and build flat payloads with p8/p16/p32/p64, u8/u16/u32/u64 and flat, plus hexdump, enhex, unhex, cyclic and fit utilities. Assemble and disassemble instructions, and generate shellcode with shellcraft and its setreuid and dupsh helpers. Load, assemble, read and write ELF files, and read ELF information through the elf resource. Start local processes, connect to remote targets and listen for connections. Load ROP chains and call ROP gadgets, and build format-string payloads with fmtstr_payload and fmtstr_split. Set and read the pwntools context, and emit leveled log messages.
When to use it
Useful for CTF work, pwn challenges and security research where the assistant needs to compute offsets, assemble snippets, generate shellcode or drive a target process while developing an exploit. It is a niche tool; most general coding tasks do not need it.
Requirements
Runs as a local process on the user's machine, installed from PyPI with pip (Python). It is desktop-only and not available as a web executable. No accounts, API keys, headers or environment variables are declared.
Before you install
Process interaction tools start local processes, connect to remote hosts and open listeners, so the assistant can run code and reach the network on your behalf. ELF read and write tools can modify binary files on disk. Remote connections send traffic to third-party hosts you or the assistant choose.

Installation

In SourceWeft

  1. Open Mcp Pwntools in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

mcp-pwntools

MCP server exposing pwntools 4.15.0 functionality for binary exploitation tasks.

[PyPI] [Python][Ask DeepWiki]

Install

bash
pip install mcp-pwntools

MCP Server

This package exposes pwntools functionality via the MCP (Model Context Protocol).

Tools

The server provides the following tool categories:

  • Packing/Unpacking: p8, p16, p32, p64, u8, u16, u32, u64, flat
  • Assembly/Disassembly: asm, disasm
  • Shellcode Generation: shellcraft, shellcraft_setreuid, shellcraft_dupsh
  • ELF Manipulation: elf_load, elf_asm, elf_read, elf_write
  • Process Interaction: process_create, remote_connect, listen
  • ROP: rop_load, rop_call
  • Exploitation: fmtstr_payload, fmtstr_split
  • Utilities: hexdump, cyclic, cyclic_find, fit, enhex, unhex, context_set, context_get
  • Logging: log_debug, log_info, log_success, log_warn, log_error

Resources

  • elf://<path> - Load ELF file information
  • context://settings - Get current pwntools context

Usage

Run the MCP server:

bash
mcp-pwntools

Configuration (mcp.json)

json
{  "mcpServers": {    "pwntools": {      "command": "mcp-pwntools",      "env": {}    }  }}

Development

bash
git clone https://github.com/daedalus/mcp-pwntools.gitcd mcp-pwntoolspip install -e ".[test]"
# run testspytest
# formatruff format src/ tests/
# lintruff check src/ tests/
# type checkmypy src/

mcp-name

mcp-name: io.github.daedalus/mcp-pwntools

Source: README.md at commit 4d6e235

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v0.1.0LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts