Not-Yet

Driving security tools with an LLM meant a new script each time, since every tool had its own way of being called.

Built a Flask server that exposes Kali tools (nmap, gobuster, sqlmap, metasploit, hydra, and more) as endpoints and a Perplexity search server, then wrapped both behind a single FastMCP server. The @mcp.tool decorator registers each tool so an LLM can pick and call it like a function.

The LLM picks and calls the right tool for the situation instead of following a fixed script. With trivy SBOM analysis and Perplexity PoC search tools added, it captured flags on 5 of 10 Dreamhack web CTF problems. It was the Whitehat School cohort 3 final project, and I extended it into CTF-Solver after the presentation.