Introduction to Offensive AI

// claude_desktop_config.json — MCP server configuration
// Location: ~/Library/Application Support/Claude/claude_desktop_config.json (macOS)
//           %APPDATA%\Claude\claude_desktop_config.json (Windows)
{
  "mcpServers": {
    "security-toolkit": {
      "command": "npx",
      "args": ["-y", "@anthropic/mcp-server-security"],
      "env": {
        "NMAP_PATH": "/usr/bin/nmap",
        "NUCLEI_PATH": "/usr/bin/nuclei"
      }
    },
    "ollama-bridge": {
      "command": "python3",
      "args": ["-m", "mcp_ollama_bridge"],
      "env": {
        "OLLAMA_HOST": "http://localhost:11434",
        "MODEL": "llama3.3:70b"
      }
    }
  }
}

# MITRE ATLAS Navigator — export adversarial ML threat matrix
# Prerequisites: pip install mitreattack-python requests
# Docs: https://atlas.mitre.org/
import requests, json

# Fetch the ATLAS matrix (adversarial ML techniques)
ATLAS_URL = "https://raw.githubusercontent.com/mitre-atlas/atlas-data/main/dist/schemas/atlas-attack-enterprise.json"
resp = requests.get(ATLAS_URL)
atlas = resp.json()

# List technique categories
for technique in atlas.get("techniques", [])[:10]:
    tid = technique.get("id", "N/A")
    name = technique.get("name", "N/A")
    print(f"  {tid}: {name}")

# --- Expected Output ---
# AML.T0000: ML Model Access
# AML.T0001: ML Attack Staging
# AML.T0002: Active Scanning
# AML.T0003: Craft Adversarial Data
# AML.T0004: Data Poisoning
# AML.T0005: Exfiltration via ML API
# AML.T0006: Model Evasion
# AML.T0007: Model Inference
# AML.T0008: Model Theft
# AML.T0009: Supply Chain Compromise

# Prerequisites: curl, Docker (optional)
# Install Ollama (macOS/Linux)
curl -fsSL https://ollama.com/install.sh | sh

# Pull a security-focused model
ollama pull llama3.3:70b
ollama pull deepseek-r1:32b

# Verify the model is running
ollama list
# NAME                  ID            SIZE    MODIFIED
# llama3.3:70b          a]6b4c8df...  39 GB   2 minutes ago
# deepseek-r1:32b       f1e2d3c4...   18 GB   5 minutes ago

# Run an interactive security query
ollama run llama3.3:70b "Explain the OWASP Top 10 2025 changes"

# Start the Ollama API server (default: http://localhost:11434)
ollama serve

# Test API connectivity
curl http://localhost:11434/api/tags | jq '.models[].name'

# Prerequisites: pip install langchain openai mcp-sdk
# Example: minimal MCP-aware agent using LangChain + MCP
import asyncio
from mcp import ClientSession, StdioServerParameters
from mcp.client.stdio import stdio_client

async def run_security_agent():
    """Connect to an MCP security server and invoke a scan tool."""
    server_params = StdioServerParameters(
        command="npx",
        args=["-y", "@anthropic/mcp-server-security"]
    )

    async with stdio_client(server_params) as (read, write):
        async with ClientSession(read, write) as session:
            await session.initialize()

            # List available security tools
            tools = await session.list_tools()
            for tool in tools.tools:
                print(f"  Tool: {tool.name} — {tool.description}")

            # Call a reconnaissance tool
            result = await session.call_tool(
                "nmap_scan",
                arguments={"target": "192.168.1.0/24", "flags": "-sV --top-ports 100"}
            )
            print(result.content[0].text)

asyncio.run(run_security_agent())