I
io.github.bx33661/wireshark-mcp
wireshark-mcp
Professional network analysis with tshark. Security audits, deep-dives, and threat detection.
1 open CVE
MIT license
Actively maintained
Last commit 3d ago
Works with most clients
Transport: http
4 tools · ~142 tok
Grade A · 0.1% of 200K ctx
MCPpedia last refreshed this data
io.github.bx33661/wireshark-mcp is an MCP server that professional network analysis with tshark. Security audits, deep-dives, and threat detection. Its tool list has not been published yet over http, requires no API key, and scores 84/100 on MCPpedia's security, maintenance and efficiency rubric.
Step 1
Install in your client
Config is the same across clients - only the file and path differ.
CD
Supported in Claude Desktophttp · Node 18+
Paste into ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"io-github-bx33661-wireshark-mcp-bx33661": {
"args": [
"wireshark-mcp"
],
"command": "uvx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Embed in your READMEAbout badges →
[](https://mcppedia.org/s/io-github-bx33661-wireshark-mcp-bx33661)
Read me
What io.github.bx33661/wireshark-mcp does
Professional network analysis with tshark. Security audits, deep-dives, and threat detection.
Test This Server
Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.
uvx 'wireshark-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Scored, not listed
Why this score
Five weighted categories - click any category to see the underlying evidence.
Score breakdown
84/100across 5 weighted dimensions
0255075100
26
13
20
15
10
−16
Security
Maintenance
Efficiency
Documentation
Compatibility
Categoriesclick a row to see evidence
Security
OSV.dev1 open
CVE-2026-43901mediumCVSS 6.8
wireshark-mcp vulnerable to arbitrary file write via export_objects when WIRESHARK_MCP_ALLOWED_DIRS is not configured
## Description ### Impact `wireshark-mcp` exposes a `wireshark_export_objects` MCP tool that accepts an attacker-controlled `dest_dir` parameter and passes it to tshark's `--export-objects` flag with **no mandatory path restriction**. The path sandbox (`_allowed_dirs`) is `None` by default and only activates when the environment variable `WIRESHARK_MCP_ALLOWED_DIRS` is explicitly set. In a default installation, any directory on the filesystem can be used as the export destination. **Affected
Affected:
>= 0source →Inventory
Tools (4)
Click any tool to inspect its schema.
~142 tokens total
Community
Reviews
Be the first to review
Have you used this server?
Share your experience - it helps other developers decide.
How easy was setup?Did it work reliably?How was the documentation?
Sign in to write a review.
Frequently Asked Questions
- Is io.github.bx33661/wireshark-mcp safe to use?
- io.github.bx33661/wireshark-mcp has 2 known CVEs tracked by MCPpedia. You can verify these on OSV.dev by searching for "wireshark-mcp". Review the Security section above for details before installing.
- How do I install io.github.bx33661/wireshark-mcp?
- io.github.bx33661/wireshark-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
- What can io.github.bx33661/wireshark-mcp do?
- io.github.bx33661/wireshark-mcp provides 4 tools: full, Install, Tools, Documentation. See the full tools list on the server page for descriptions and parameters.
- What AI clients work with io.github.bx33661/wireshark-mcp?
- io.github.bx33661/wireshark-mcp is compatible with claude-desktop, cursor, claude-code. It uses http transport.
- Is io.github.bx33661/wireshark-mcp actively maintained?
- io.github.bx33661/wireshark-mcp is actively maintained - last commit was 3 days ago. It has 345 GitHub stars.
Related
Similar servers
Others in security
I
io.github.vmoranv/jshookmcp95Search-first MCP server for JavaScript reverse engineering: 735 tools across 36 domains.
2.1k 2
Malvex93AI-driven malware analysis framework with 30+ integrated tools, web REPL, and MCP server
42 10
D
dev.ytapi/youtube92YouTube transcripts, comments, video details, heatmaps, search, channels and playlists.
1 5
I
io.github.CakeRepository/1password92MCP server for 1Password service accounts — tools and resources for vaults and credentials
21 8
MCP Security Weekly
Get CVE alerts and security updates for io.github.bx33661/wireshark-mcp and similar servers.
Community
Discussion
Start a conversation
Ask a question, share a tip, or report an issue.
Has anyone used this with Cursor?How do you handle auth?Any alternatives?
Sign in to join the discussion.