Skip to content

v3.0.0: Go-Native MCP Server, Scope Guard, SPA Crawler & Zero-Go NPX Distribution

Choose a tag to compare

View all tags
@Zyrexnn Zyrexnn released this 25 Aug 02:52
· 48 commits to main since this release
v3.0.0
bcd14a2

🛡️ Cybermes Engine v3.0.0 Release Notes

Cybermes v3.0.0 introduces a ground-up paradigm shift with a standalone Go-native Model Context Protocol (MCP) Server, Zero-Go NPX Distribution, Universal Multi-Client Auto-Injector, and high-performance reconnaissance engines (Scope Guard, Dual-Engine HTTP Prober, and SPA Crawler).

🚀 Major Highlights & Features

  1. Native Model Context Protocol (MCP) Server (pkg/mcp & cmd/cybermes-mcp)

    • High-throughput Go-native MCP server running over standard stdio JSON-RPC.
    • 10 Core Security Tools:
      • cybermes_search_knowledge: Sub-50ms offline wiki, playbook & payload queries.
      • cybermes_list_skills & cybermes_get_skill: Direct offensive playbook catalog access.
      • cybermes_scan_secrets: 48-pattern credential discovery engine with concurrency.
      • cybermes_validate_scope: Strict target validation against defined scope boundaries.
      • cybermes_http_probe: Native dual-engine TLS & HTTP technology fingerprinting.
      • cybermes_recon_crawl: Single-page app (SPA) endpoint miner.
      • cybermes_record_finding, cybermes_aggregate_report, cybermes_list_findings: Structured deliverables orchestration.
    • MCP Resources: Direct access to playbook SOPs (skills://), reports (reports://), and target scope.
    • Curated Prompts: cybermes_hunt, cybermes_triage.

  2. Universal Multi-Client Auto-Injector (scripts/setup_mcp.py & npx -y cybermes-mcp install)

    • Automated 1-click configuration injector supporting Cursor, Claude Desktop, Windsurf, OpenCode, VS Code / Cline, Roo Code, Claude Code CLI, Continue.dev, Zed, Kilo Code, Hermes, and Codex.
    • Atomic file writes, timestamped backups (.bak), and cross-platform path normalization.

  3. Official NPM Package & Zero-Go NPX Launcher (cybermes-mcp)

    • Official package live on NPM: 👉 https://www.npmjs.com/package/cybermes-mcp
    • Instant execution with npx -y cybermes-mcp or npx -y cybermes-mcp install.
    • Smart platform-aware release binary downloader with SHA-256 integrity verification.

  4. Scope Guard Engine (pkg/scope)

    • Boundary enforcement supporting wildcard domain rules (*.target.com), exact hosts, and IPv4/IPv6 CIDR subnets.

  5. Dual-Engine HTTP Inspector (pkg/probe)

    • High-speed web prober with TLS cipher analysis and 250+ technology signatures.

  6. SPA Endpoint Crawler (pkg/crawl)

    • JavaScript/SPA-aware endpoint extractor with Smart Pipe token budgeting.

📦 Pre-compiled Binaries & Integrity Checksums

Asset SHA-256 Checksum
cybermes-mcp-v3.0.0-darwin-amd64 9218df7bd94cff77515c6361fc4c5263142978ce9a2ccae63b90dc49da4dc3fa
cybermes-mcp-v3.0.0-darwin-arm64 2c7dc678a08cc0e23797df76ae07dd4c95242429fc80f6ad99905f2989e46bb8
cybermes-mcp-v3.0.0-linux-amd64 1a253ae206643ac971cb70ea4dda66a97e233f91f1bb91ec98b040dd05870c4f
cybermes-mcp-v3.0.0-linux-arm64 339a238d4a311cea0cf82b6a1b75a700152616dac1dbdea0fc993d8f69d7031d
cybermes-mcp-v3.0.0-windows-amd64.exe 7b048ddad39e19dca45031feb2e786d2bdab77e2c91cc3a25ba46645a12b6b3a

⚡ Quickstart

# 1-Click NPX Auto-Injector for all AI IDEs:
npx -y cybermes-mcp install

# Check status of configured AI clients:
npx -y cybermes-mcp status

# Or run MCP server directly over stdio:
npx -y cybermes-mcp
Assets 8
Loading