pwncat-mcp

# pwncat [](https://asciinema.org/a/417930) pwncat is a post-exploitation platform ~~for Linux targets~~. It started out as a wrapper around basic bind and reverse shells and has grown from there. It streamlines common red team operations while staging code from your attacker machine, not the target. This project ships two entry points, both installed from PyPI under the package name `pwncat-mcp`: - `pwncat-cs` — the classic interactive post-exploitation platform - `pwncat-mcp` — an [MCP](https://modelcontextprotocol.io) server exposing the pwncat API (40+ tools) to AI agents: session management, file operations, command execution, enumeration, privilege escalation, implants and config. pwncat used to only support Linux, but there has been a lot of work recently to support multiple platforms. Currently, there is alpha support for Windows targets. Please see the latest [documentation] for details on how to use pwncat with a Windows target. pwncat intercepts the raw communication with a remote shell and allows the user to perform automated actions on the remote host including enumeration, implant installation and even privilege escalation. After receiving a connection, pwncat will setup some common configurations for working with remote shells. - Disable history in the remote shell - Normalize shell prompt - Locate useful binaries (using `which`) - Attempt to spawn a pseudo-terminal (pty) for a full interactive session `pwncat` knows how to spawn pty's with a few different methods and will cross-reference the methods with the executables previously enumerated. After spawning a pty, it will setup the controlling terminal in raw mode, so you can interact in a similar fashion to `ssh`. `pwncat` will also synchronize the remote pty settings (such as rows, columns, `TERM` environment variable) with your local settings to ensure the shell behaves correctly with interactive applications such as `vim` or `nano`. …