OpenCROW Network Toolbox

Use this skill for network artifact work that spans both Python packet tooling and native capture or triage tools: scapy, tshark, tcpdump, nmap, nc, and socat.

Quick Start

Start the MCP server from the installed CLI:

opencrow-network-mcp

Run inline Python in ctf:

python ~/.codex/skills/opencrow-network-toolbox/scripts/run_network_python.py --code 'from scapy.all import IP, TCP; print((IP(dst=\"127.0.0.1\")/TCP(dport=31337)).summary())'

Run a packet helper:

python ~/.codex/skills/opencrow-network-toolbox/scripts/run_network_python.py --file /absolute/path/to/packets.py

Verify the mapped stack:

python ~/.codex/skills/opencrow-network-toolbox/scripts/verify_toolkit.py

Workflow

1. Start with the MCP server and call toolbox_info, toolbox_verify, and toolbox_capabilities.
2. Use network_pcap_inspect first when you already have a capture or need a quick filtered look at traffic.
3. Use network_scan to map reachable services before deeper protocol work.
4. Use network_socket_probe for one-shot TCP or UDP validation without opening a persistent async session.
5. Use network_python for Scapy-driven packet generation, decoding, or challenge-specific protocol logic.
6. Use netcat-async or ssh-async separately when you need a long-lived interactive session rather than packet tooling.
7. Read references/tooling.md for quick guidance.

Tool Selection

• Use scapy for packet crafting, sniffing, protocol parsing, PCAP analysis, and challenge-specific dissectors.
• Use opencrow-network-mcp first for typed MCP access to capture inspection, scanning, probing, and Scapy execution.
• Use tshark for quick PCAP summaries, display filters, and protocol-aware decoding.
• Use tcpdump for capture creation and fast packet inspection from the shell.
• Use nmap for host, port, and service discovery before deeper protocol analysis.
• Use nc or socat for quick socket experiments, port relays, or test servers.
• Use plain Python socket code only when the task is simpler than full packet work.
• Use netcat-async when the service is an interactive TCP stream and session persistence matters more than packet structure.

Resources

• opencrow-network-mcp: stdio MCP server for typed PCAP inspection, scanning, socket probing, and Scapy execution.
• scripts/run_network_python.py: execute inline code or a .py file inside the ctf environment.
• scripts/verify_toolkit.py: confirm that scapy is available.
• references/tooling.md: quick selection notes for network workflows.