metasploit-cursor-harness: Skill for Cursor

Metasploit Cursor Harness

When to Use MCP vs Shell

Always use MCP for:

• Module search and info (msf_search_modules, msf_module_info)
• Database queries (hosts, services, vulns, creds, loot, notes)
• Exploit execution (msf_run_exploit), auxiliary modules, post modules
• Session management (list, command, terminate, upgrade)
• Handler/listener management
• Payload generation and workspace management

Fall back to shell only for:

• Interactive msfconsole workflows with complex multi-step resource scripts
• Operations not yet exposed in the MCP

Engagement Setup

1. Read .cursor/skills/pentest-workflow/SKILL.md and check phase state
2. Verify scope file exists: scope/scope-master.txt (one CIDR per line)
3. Create or select engagement: engagements/{engagement_id}/roe.yaml
4. Confirm engagements/{engagement_id}/phase-state.yaml exists
5. Run gate check: python .cursor/skills/pentest-workflow/scripts/gate-check.py {engagement_id}
6. Start WSL RPC if not running:

.\scripts\start-msfrpcd.ps1

LHOST Resolution (mandatory before reverse payloads)

Resolve LHOST deterministically. Try in this order; use the FIRST that succeeds:

1. msf_get_lab_network() -> use lhost field from response
2. Read engagements/{engagement_id}/lhost.yaml -> use lhost value
3. STOP and ask user for LHOST IP

NEVER hardcode an IP. NEVER use 0.0.0.0. NEVER guess.

Verify RPC connectivity

MSF MCP (preferred):

msf_status()

CLI fallback:

wsl -e bash -lc "msfconsole -x 'version; exit'"
curl -s http://127.0.0.1:55553/ 2>/dev/null || echo "RPC port check only"

Domain skills

Load the domain skill before improvising techniques. Router: pentest-knowledge-base.

Scope signal	Skill
Web application	web-app-pentest
Active Directory	internal-ad-pentest
Windows host	windows-pentest
Open port/service	hacktricks-methodology
Database access	database-pentest
AWS/Azure/cloud	cloud-pentest
Docker/K8s/CI-CD	container-devops-pentest
Mobile app	mobile-pentest
macOS host/session	macos-pentest
Linux host/session	linux-pentest
LLM/chatbot/MCP	ai-llm-pentest
Binary exploit (ROE)	binary-exploit-pentest
Cheatsheets/methodology	methodology-cheatsheets
MSF exploit chain	msf-exploit-chain
Post-ex MCP workflow	msf-post