APT Analysis

Provides secure sample downloading over a jump host for malware analysis via an MCP client.

python

0

GitHub Stars

python

Language

4 months ago

First Indexed

2 months ago

Catalog Refreshed

Documentation & install

Readme and setup notes from the catalogue, plus a client-ready config you can copy for your MCP host.

Installation

Add the following to your MCP client configuration file.

Configuration

View docs

{
  "mcpServers": {
    "zrax-x-apt-analysis-mcp": {
      "command": "path/to/your/venv/Scripts/python.exe",
      "args": [
        "path/to/apt-analysis-mcp/server.py"
      ]
    }
  }
}

You run an MCP server that helps analysts securely download malware samples through a jump host, enabling safer, auditable analysis workflows without exposing your analysis machine directly to the internet.

How to use

You will add this MCP server to your MCP client and start it from your chosen Python environment. The server exposes a sample download capability that securely fetches samples via SSH/SCP through a designated jump host. To use it, ensure your client is configured to communicate with the MCP server and initiate a download task through the provided tool. The server handles authentication details for the jumper and target, and returns the downloaded samples to your local directory.

How to install

Prerequisites: Python 3.8+ and Git are required. It is recommended to use a virtual environment to isolate dependencies.

Step 1: Clone the repository

git clone https://github.com/zrax-x/apt-analysis-mcp.git
cd apt-analysis-mcp

Step 2: Create and activate a virtual environment

python -m venv .venv
.venv\Scripts\activate  # Windows
# source .venv/bin/activate # Linux/Mac

Step 3: Install dependencies

pip install -r requirements.txt

Step 4: Prepare configuration skeleton

cop config.example.json config.json

Additional sections

Configuration you will need to provide includes SSH details for both the jumper and the target servers, and the local directory where downloaded samples should be stored.

Configuration details you will typically edit in a JSON file look like this (adjust to your environment; do not share sensitive credentials in public spaces):

{
  "jumper": {
    "user": "your_jumper_user",
    // ...
  },
  "target": {
    "user": "your_target_user",
    // ...
  },
  "local_download_dir": "C:\\path\\to\\samples"
}

Available tools

sample_downloader

Securely download malware samples from a remote server via a jump host using SSH/SCP; handles jumper and target credentials and local storage directory.