mcp-ethical-hacking — Claude Code MCP server
This MCP server extracts and reviews Reddit and LinkedIn data. It is also an educational project for examining security risks in MCP tools.
Open on GitHubWhat mcp-ethical-hacking does
mcp-ethical-hacking gives an agent tools for collecting Reddit discussions, comments, and metadata, plus reviewing LinkedIn profiles and their content strategy. The server uses MCP and supports both stdio and SSE transport.
The repository is built as a security-focused teaching example. Its parts include a Reddit content extractor, a LinkedIn profile analyzer, and the MCP server implementation. The project shows network calls to third-party services, filesystem access, WebAssembly execution, and code carried inside images.
Run it in an isolated environment with restricted permissions and activity logging. A remote image may carry executable code, while the LinkedIn component loads WebAssembly from a local image, so source review belongs before connection.
What it helps with
- extract Reddit discussions and comments
- collect Reddit post metadata
- analyze LinkedIn profiles
- review a profile’s content strategy
- inspect MCP tool security risks
Example prompts for the agent
- Extract Reddit discussions, comments, and metadata for this topic.
- Analyze this LinkedIn profile and summarize its content strategy.
- Inspect this MCP server for network access, file operations, and code execution.
How to install mcp-ethical-hacking
Install
The MCP registry has no launch command for it: see the repository README
Step by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more
Questions about mcp-ethical-hacking
How do I install mcp-ethical-hacking in Claude Code?
Connect the server through an MCP transport: stdio or SSE. The implementation describes both transport methods.
What does mcp-ethical-hacking do?
It extracts Reddit material and analyzes LinkedIn profiles. The project also illustrates actions an MCP tool may perform beyond the expected content workflow.
What security issues does the server demonstrate?
The project covers network requests, filesystem access, WebAssembly execution, and executable code hidden in images. Use isolation and limited permissions when examining it.
