Back to MCP directory
publicPublicdnsLocal runtime

viper

VIPER 是一个功能强大的红队平台,专为网络安全评估设计。它集成了对手模拟和红队操作的核心工具,支持多平台(Windows、Linux、macOS),并涵盖 MITRE ATT&CK 框架的所有阶段。VIPER 提供用户友好的界面、自动化工作流、内置大型语言模型(LLM)代理以及 100 多个后渗透模块,支持 Python 自定义扩展。其高级功能包括反追踪、防御规避、跳板图和自动化通知,帮助团队高效完成安全评估任务。VIPER 免费使用,适合团队协作和复杂网络安全场景。

article

README

cover-v5-optimized

Getting-Started · Documentation

Static Badge chat on Discord follow on X(Twitter) Commits last month Issues closed Docker Pulls Release

README in English 简体中文版自述文件

VIPER is a powerful and flexible red team platform. It integrates the core tools and functionalities required for adversary simulation and red team operations, assisting you in efficiently completing cybersecurity assessment tasks.

  • User-Friendly Interface
    Provides an intuitive interface that enables red team members to rapidly initiate security assessment tasks.

  • Multi-Platform Support
    Supports red team assessments across multiple operating systems, including Windows, Linux, and macOS, ensuring broad compatibility.

  • Out-of-the-Box Red Teaming Tools
    Designed to cover all phases of the MITRE ATT&CK framework, offering a comprehensive attack simulation solution.

  • Integrated LLM Agent
    Built-in Large Language Model (LLM) agent enhances automated processing capabilities and intelligent decision-making support.

  • Automated Workflows
    Supports orchestration and notification mechanisms for 24/7 monitoring of target environments.

  • Rich Built-in Modules Integrates over 100 post-exploitation modules covering all stages of the MITRE ATT&CK framework, meeting the needs of different scenarios.

  • Custom Extensibility
    Supports Python-based custom module development to meet specialized requirements or add extended functionalities.

  • More Advanced Features Includes built-in anti-tracing/handler firewall/defense evasion/pivot graph/automated notification functions.

img.webp img_1.webp img_2.webp img_3.webp img_4.webp img_5.webp

Product Comparison

| | VIPER | Cobalt Strike | NightHawk | BruteRatel | |--------------------|-----------------------------|-------------------|-------------------|------------------| | Implants | Windows
Linux
MacOS | Windows | Windows | Windows | | Visual UI | ✅ | ✅ | ✅ | ✅ | | Pivot Graph | ✅ | ✅ | ✅ | ✅ | | Custom Plugin | Python | CNA | ❌ | ❌ | | Built-in Evasion | ✅ | ❌ | ✅ | ✅ | | Automation | ✅ | ❌ | ✅ | ❌ | | Team Collaboration | ✅ | ✅ | ❌ | ❌ | | LLM Agent | ✅ | ❌ | ❌ | ❌ | | Price | Free | $12,600 user/year | $10,000 user/year | $3,000 user/year |

Website

www.viperrtp.com

help

Runtime guide

cloud

Hosted runtime

Hosted servers run from a provider-managed environment. You usually connect the MCP client to the hosted endpoint or follow the provider's authorization flow, without keeping a local process alive

  1. Open provider connection page
  2. Authorize or copy endpoint
  3. Connect from your MCP client
terminal

Local runtime / other methods

Local servers run on your own machine or infrastructure. You normally copy the server_config into your MCP client, install the required package, and provide env variables from env_schema when needed

  1. Copy server_config
  2. Install required package
  3. Fill env variables and restart client