LitterBox

LitterBox

A self-hosted red team sandbox for testing payloads against modern detection before deployment.

MCPDevOpen source
Type
MCP
Transport
http
Open source
Yes
GitHub Stars
★ 1.5k
Source
mcp-github

Overview

LitterBox is a self-hosted red team sandbox designed to test payloads against modern detection mechanisms prior to deployment. Through MCP integration, LLM agents can drive the analysis end-to-end. Users can upload samples, run static/dynamic/EDR analysis, obtain detection scores and trigger metric breakdowns, helping determine whether a payload is suitable for field use. LitterBox can also distribute payloads to isolated EDR-instrumented Windows VMs and pull back relevant detection alerts to the result page. Suitable for red team and blue team security workflows.

Capabilities

  • Upload samples for analysis
  • Run static/dynamic/EDR analysis
  • Get detection scores and trigger metrics
  • Distribute payloads to EDR-instrumented VMs
  • Integrate multiple scanning tools

Use cases

Red team testing of malicious payloadsBlue team malware analysisSecurity teams evaluating payload detection capabilities

Setup

Requires: Python 3.11+管理员权限
git clone https://github.com/BlackSnufkin/LitterBox.git; cd LitterBox; python -m venv venv; .\venv\Scripts\Activate.ps1; pip install -r requirements.txt; python litterbox.py

This information was compiled by AI from public sources and may contain inaccuracies — please refer to the source.

FAQ

What operating systems does LitterBox support?

Supports Windows and Linux (Docker).

How do I configure EDR integration?

Add configuration files in the Config/edr_profiles/ directory.

Related skills