LitterBox MCP Server
BlackSnufkin/LitterBox
[](https://agentrank-ai.com/tool/BlackSnufkin--LitterBox/?utm_source=badge&utm_medium=readme&utm_campaign=agentrank_badge) A self-hosted sandbox for red teams to test payloads against modern detection before deployment. MCP integration lets an LLM agent drive analysis end to end.
claude mcp add agentrank -- npx -y agentrank-mcp-server Overview
BlackSnufkin/LitterBox is a YARA tool licensed under GPL-3.0. A self-hosted sandbox for red teams to test payloads against modern detection before deployment. MCP integration lets an LLM agent drive analysis end to end. Topics: malware-development, redteam, sandbox, ai, mcp, mcp-server, docker-compose, malware-analysis, offensive-security.
Ranked #4487 out of 24846 indexed tools.
Has 1,548 GitHub stars.
Ecosystem
Score Breakdown
1,548 stars → well-known project
Last commit 6mo ago → stale
15/16 issues closed → responsive maintainer
3 contributors → small team
No dependents → no downstream usage
Weights: Freshness 20% · Issue Health 20% · Dependents 22% · Stars 10% · Contributors 8% · How we score →
How to Improve
Matched Queries
From the README
# LitterBox A self-hosted payload-analysis sandbox for red teams. Upload a sample, run static / dynamic / EDR analysis against it, get a Detection Score and a triggering-indicators breakdown — decide whether the payload is field-ready before it leaves the lab. LitterBox can also dispatch payloads to a separate EDR-instrumented Windows VM (Elastic Defend or Fibratus) and pull the correlated detection alerts back into the results page. > While designed primarily for red teams, LitterBox is equally useful for blue teams running the same tools in their malware-analysis workflows. ## Documentation Operator and developer documentation lives in the **[LitterBox Wiki](../../wiki)**. | Topic | Wiki page | |---|---| | How everything fits together | [Application Architecture](../../wiki/Application-Architecture) | | Run static + every reachable EDR in parallel | [All in One Pipeline](../../wiki/All-in-One-Pipeline) | | Dispatch payloads to a real EDR VM | [EDR Integration](../../wiki/EDR-InRead full README on GitHub →
Get the weekly AgentRank digest
Top movers, new tools, ecosystem insights — straight to your inbox.