README 未给出安装命令，需查阅官方文档 Getting-Started 页面；LLM Agent 功能可能需要额外配置模型服务
开源红队对抗模拟平台，集成 100+ 后渗透模块与 LLM Agent，替代 Cobalt Strike
集成 AI 与 LLM 的红队对抗模拟平台，把 Cobalt Strike、Metasploit 等后渗透工具统一编排，方便安全团队做攻击演练。
核心能力
- 内置 100+ 后渗透模块，覆盖 MITRE ATT&CK 各阶段
- 支持 Windows、Linux、macOS 多平台植入体
- 集成 LLM Agent 提供自动化处理与智能决策
- 支持 Python 自定义模块开发扩展功能
- 内置反溯源、handler 防火墙、防御规避与跳板图
容易踩的坑
内容由模型根据 README 生成，可能不完整或不准确，以官方文档为准。看原文 README
- v3.1.113.1.11 Skill is all you need最新正式版2026-03-31 · 2026-03-31 10:09 UTC
优化
- 更新MCP服务器,压缩docstring,占用更少上下文,修复BUG MCP服务器
新功能
- 新增 Claude Code Plugin,通过Claude Code插件市场安装后,可以在Claude Code中使用Viper的MCP Tools,实现无缝衔接的AI辅助红队操作.
开发者笔记
Claude 提出的 MCP 和 Skill 的两个核心概念,在Viper中得到了很好的实现.通过MCP服务器,我们将Viper的功能以API的形式暴露出来,而Skill则是对这些功能的封装和组合,使得用户可以更高效地使用这些功能. 使用Viper进行内网渗透,或者说使用任何工具进行内网渗透,都是有"套路"的,但是这个"套路"更多的是在思维层面上的,而不是在具体的操作步骤上. 每个内网环境都是独特的,需要根据实际情况进行调整和适应. 而Viper的Skill则是对这些"套路"的一种抽象和封装,使得用户可以更高效地使用这些"套路",而不需要关心具体的操作细节. 而所有的这些动作动作基本都需要 Session 这个桥梁在内网主机中执行,所以将 Session 的功能都通过MCP开放出来让 skill 可以调用,是 AI 驱动内网渗透的基础. 未来我们还会继续增加更多的 MCP API,让 Skill 可以调用更多的功能,从而实现更加强大和智能的内网渗透能力.
Improvements
- Updated the MCP Server, compressed docstrings to use less context, and fixed bugs.
New Features
- Added the Claude Code Plugin. After installing it from the Claude Code plugin marketplace, you can use Viper MCP tools directly inside Claude Code for seamless AI-assisted red team operations.
Developer Notes
The two core concepts introduced by Claude — MCP and Skill — are implemented very well in Viper. Through the MCP server, we expose Viper capabilities as APIs, while Skills package and combine those capabilities so users can work with them more efficiently.
Using Viper for internal network penetration testing — or using any tool for that purpose — always involves certain common patterns. But those patterns mainly exist at the level of thinking and strategy, rather than as fixed operational steps.
Every internal environment is unique, so you need to adapt based on the actual situation. Viper Skills abstract and package these patterns so users can apply them more efficiently without focusing on low-level operational details.
Nearly all of these actions require a Session as the bridge for execution on internal hosts, so exposing Session capabilities through MCP for Skills to call is the foundation of AI-driven internal network penetration testing.
In the future, we will continue adding more MCP APIs so Skills can call more capabilities and deliver stronger, smarter internal network penetration testing workflows.
- v3.1.103.1.10 - Happy New Year2026-01-18 · 2026-01-18 08:49 UTC
查看更新说明
3.1.10 新年快乐
优化
- 更新metasploit-framework至最新版本(6.4.109)
- 使用官方rex-core/socket库替代自定义socket实现
开发者笔记
新年新气象,下个版本会在春节后发布.
3.1.10 Happy New Year
Optimizations
-
Updated Metasploit Framework to the latest version (6.4.109)
-
Used the official rex-core/socket library instead of a custom socket implementation
Developer Notes
New Year, new look! The next version will be released after the Spring Festival.
- v3.1.93.1.9 - Let's Summarize2025-11-09 · 2025-11-09 10:28 UTC
查看更新说明
The new version has update AI Agent Summary function and meterpreter stdapi plugin
- v3.1.83.1.8 New Start To Fly2025-08-25 · 2025-08-25 14:36 UTC
查看更新说明
- v3.1.73.1.7 - Python Is All You Need2025-06-15 · 2025-06-15 10:18 UTC
查看更新说明
The new version has added multiple Kit suite modules, optimized intelligent agent prompt, and added command center functionality
用户点评
登录用户的真实使用记录，可按版本和硬件筛选共 0 条
还没有人点评。第一个说出真实体验的人最有价值。
VIPER is a powerful and flexible red team platform. It integrates the core tools and functionalities required for adversary simulation and red team operations, assisting you in efficiently completing cybersecurity assessment tasks.
-
User-Friendly Interface
Provides an intuitive interface that enables red team members to rapidly initiate security assessment tasks. -
Multi-Platform Support
Supports red team assessments across multiple operating systems, including Windows, Linux, and macOS, ensuring broad compatibility. -
Out-of-the-Box Red Teaming Tools
Designed to cover all phases of the MITRE ATT&CK framework, offering a comprehensive attack simulation solution. -
Integrated LLM Agent
Built-in Large Language Model (LLM) agent enhances automated processing capabilities and intelligent decision-making support. -
Automated Workflows
Supports orchestration and notification mechanisms for 24/7 monitoring of target environments. -
Rich Built-in Modules Integrates over 100 post-exploitation modules covering all stages of the MITRE ATT&CK framework, meeting the needs of different scenarios.
-
Custom Extensibility
Supports Python-based custom module development to meet specialized requirements or add extended functionalities. -
More Advanced Features Includes built-in anti-tracing/handler firewall/defense evasion/pivot graph/automated notification functions.
Product Comparison
| VIPER | Cobalt Strike | NightHawk | BruteRatel | |
|---|---|---|---|---|
| Implants | WindowsLinuxMacOS | Windows | Windows | Windows |
| Visual UI | ✅ | ✅ | ✅ | ✅ |
| Pivot Graph | ✅ | ✅ | ✅ | ✅ |
| Custom Plugin | Python | CNA | ❌ | ❌ |
| Built-in Evasion | ✅ | ❌ | ✅ | ✅ |
| Automation | ✅ | ❌ | ✅ | ❌ |
| Team Collaboration | ✅ | ✅ | ❌ | ❌ |
| LLM Agent | ✅ | ❌ | ❌ | ❌ |
| Price | Free | $12,600 user/year | $10,000 user/year | $3,000 user/year |