External Reconnaissance Server

Example Use Cases

• 1

  Enumerate DNS records and attempt zone transfers to identify exposed infrastructure.

• 2

  Discover subdomains and perform brute-force subdomain enumeration using a supplied wordlist.

• 3

  Gather domain-level information (WHOIS, HTTP headers) and assess email/SSL configuration security.

Description

This is a proof-of-concept Model Context Protocol (MCP) server for running active external reconnaissance tasks against authorized domains. It automates DNS record enumeration (A, AAAA, MX, NS, SOA, TXT, SRV), zone transfer attempts, subdomain brute-forcing, WHOIS lookups, HTTP header analysis, email security assessment, and SSL certificate inspection. The tool integrates with Claude for Desktop via an MCP setup and requires external utilities (dig, whois, dnsrecon). It is intended for demonstration and authorized testing only and is not production-ready.