AI-Powered Evasion Framework for Authorized Red Team Operations
⚠️ For authorized security testing only. Obtain written permission before use.
BOAZ-MCP wraps the BOAZ framework with MCP (Model Context Protocol), enabling AI assistants to generate evasive payloads through natural language.
Key Features:
- 77+ process injection loaders
- 12 encoding schemes (AES, ChaCha20, UUID, XOR, etc.)
- LLVM obfuscation (Akira & Pluto)
- Syscalls, API unhooking, ETW patching
- Anti-emulation, sleep obfuscation
Important: BOAZ wraps your existing payloads (Cobalt Strike, Mimikatz, etc.) with evasion techniques. You must provide your own payloads.
git clone https://github.com/Yenn503/BOAZ-MCP.git
cd BOAZ-MCP
./quickstart.sh✅ No compilation needed • Pre-built obfuscators • Works everywhere
git clone https://github.com/Yenn503/BOAZ-MCP.git
cd BOAZ-MCP
./install/setup.shCompiles Akira & Pluto LLVM obfuscators locally. Requires: Linux, 8GB+ RAM, build tools.
Detailed guides: docs/DOCKER_QUICKSTART.md | docs/INSTALL.md
Auto-configuration available for:
- Claude Desktop
- Claude Code CLI
- Continue.dev (VS Code)
- Cursor IDE
- VS Code (Generic MCP)
Run configurator:
./install/configure_mcp.shManual configuration: See Configuration Guide
Talk to your AI assistant naturally:
"I have beacon.exe. Make it evasive with UUID encoding and loader 16."
"Wrap mimikatz.exe with Akira obfuscation and ETW patching."
"Show me all threadless injection loaders."
More examples: docs/USAGE.md
| Document | Description |
|---|---|
| DOCKER_QUICKSTART.md | Docker setup guide |
| INSTALL.md | Detailed installation |
| USAGE.md | Usage examples |
| API.md | MCP tools reference |
| AI_AGENTS.md | AI assistant guide |
After setup:
- Input: Place payloads in
payloads/ - Output: Find generated files in
output/
BOAZ-MCP/
├── quickstart.sh # One-command setup
├── docs/ # All documentation
├── examples/ # Configuration examples
├── install/ # Installation scripts
├── docker/ # Docker setup
├── tests/ # Test suite
├── boaz_mcp/ # MCP server
└── BOAZ_beta/ # Core BOAZ framework
This tool is for authorized security testing only.
✅ You MUST:
- Obtain written permission before use
- Use in isolated environments only
- Document all testing activities
- Comply with applicable laws
❌ You MUST NOT:
- Use without authorization
- Use on production systems
- Use for malicious purposes
- Issues: GitHub Issues
- Original BOAZ: thomasxm/Boaz_beta
- MCP Protocol: modelcontextprotocol.io
MIT License - See LICENSE for details.
Disclaimer: THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND. Users assume all responsibility for legal compliance.