OOB probe MCP server with TCP/HTTP listeners, log access, and ngrok tunnels.
- TCP tools for reverse shell testing: listen, read logs, and send data to active connections.
- HTTP tools for SSRF testing: receive requests and inspect full request logs.
- ngrok integration for public endpoints on both TCP and HTTP.
- Optional desktop notifications for new connections/requests.
TCP:
listen_tcp, send_tcp, read_tcp, close_tcp
HTTP:
listen_http, read_http, close_http
Other:
status
Install the server:
go install github.com/lambdasawa/oob-probe-mcp-server@latestThis server uses ngrok to expose local listeners. Configure an auth token first:
ngrok config add-authtoken <YOUR_TOKEN>The token is read from your ngrok config file (typically ~/.config/ngrok/ngrok.yml).
Example .mcp.json entry:
{
"mcpServers": {
"oob-probe": {
"command": "oob-probe-mcp-server",
"env": {
"OOB_PROBE_ENABLE_DESKTOP_NOTIFICATION": "false"
}
}
}
}Desktop notifications are enabled by default. Disable them by setting:
OOB_PROBE_ENABLE_DESKTOP_NOTIFICATION=false
This tool is developed for research purposes in CTFs and controlled lab environments. Use it only against systems and targets you are authorized to test.