ntobjmanager-mcp
A Model Context Protocol server that gives an AI agent live, stateful access to Windows RPC attack-surface research, bu…
Description
A Model Context Protocol server that gives an AI agent live, stateful access to Windows RPC attack-surface research, built on NtObjectManager (NtCoreLib). 22 tools, including the 2024-2026 RPC hunting methodologies as one-click operations: context-handle scanning, EPM cross-check, PhantomRPC, EPM poisoning / RPC-Racer, ALPC security-descriptor audit, and user-startable SYSTEM tasks. A persistent PowerShell engine keeps parsed servers and connected RPC clients alive across tool calls. Requires Windows, PowerShell 5.1 and the NtObjectManager module.
Community Metrics
Author
fflffl2015
Platform
mcp
Pricing model
free
Categories
- mcp
Tags
- mcp
- smithery
Capabilities
- Local MCP server