🖥️ Post-Exploitation tmux MCP Server

A MCP server that exposes essential tmux features as MCP tools — giving AI agents a terminal multiplexer for post-exploitation operations, with built-in guardrails that block destructive commands.

✨ Tools (14)

Category	Tools	Description
Sessions	3	Create, list, kill
Windows	3	Create, list, kill
Panes	3	Split, list, kill
Command Execution	3	`execute_command`, `send_keys`, `capture_pane` — all guarded
Utility	2	`validate_command_safety`, `kill_server`

🛡️ Guardrails

Every command sent through execute_command or send_keys is validated before execution. The guardrails block:

File destruction — rm -rf /, shred, wipefs
Disk operations — mkfs, dd if=, fdisk, parted
Fork bombs — :(){ :|:& };:
System shutdown — shutdown, reboot, halt, init 0/6
Critical process killing — kill -9 1, killall -9
Permission bombs — chmod -R 777 /
Dangerous redirects — > /etc/passwd, > /etc/shadow
Network destruction — iptables -F
Log tampering — > /var/log/, history -c
Obfuscated execution — curl ... | sh, base64 -d | sh

📦 Installation

cd Post-Exploitation
pip install -r requirements.txt

Prerequisite: tmux must be installed on the target machine.

🚀 Usage

Run the MCP server

python server.py

Test with the interactive client

python client.py

The client connects to server.py via stdio, lists available tools, and gives you an interactive REPL to call them.

Connect from an MCP client (e.g. AI agent)

{
  "mcpServers": {
    "post-exploitation-tmux": {
      "command": "python3",
      "args": ["path/to/Post-Exploitation/server.py"]
    }
  }
}

🔧 Tool Reference

Sessions

Tool	Description
`create_session(name, window_name?)`	Create a new detached session
`list_sessions()`	List all sessions
`kill_session(name)`	Destroy a session

Windows

Tool	Description
`create_window(session, name?)`	Create a new window
`list_windows(session)`	List windows
`kill_window(session, index)`	Kill a window

Panes

Tool	Description
`split_pane(session, window, direction?)`	Split pane vertically/horizontally
`list_panes(session, window)`	List panes with command & PID
`kill_pane(session, window, pane)`	Kill a pane

Command Execution (Guarded)

Tool	Description
`execute_command(session, window, pane, command)`	Run a command (guardrail-checked)
`send_keys(session, window, pane, keys, press_enter?)`	Send keystrokes (guarded if Enter)
`capture_pane(session, window, pane, start?, end?)`	Read pane output (trailing blanks stripped)

Utility

Tool	Description
`validate_command_safety(command)`	Pre-check a command without executing
`kill_server()`	Kill the tmux server (destroys all sessions)

📂 Project Structure

Post-Exploitation/
├── server.py            # FastMCP server — 14 tools
├── tmux_wrapper.py      # Thin Python wrapper around tmux CLI
├── guardrails.py        # Command validation & safety checks
├── client.py            # Interactive MCP test client
├── test_guardrails.py   # Guardrails unit tests
├── requirements.txt     # Python dependencies
└── README.md            # This file

🧪 Testing

Run guardrail tests

python test_guardrails.py

Test MCP tools interactively

python client.py

⚠️ Disclaimer

This tool is intended for authorized penetration testing and security research only. Unauthorized use against systems you do not own or have explicit permission to test is illegal.

Post-Exploitation tmux MCP Server