MCP-Kali-Server

Overview

MCP Kali Server is a lightweight API bridge that connects MCP clients to a Kali Linux machine, enabling AI-assisted penetration testing and solving CTF challenges. It provides controlled command execution capabilities, allowing AI models to execute terminal commands interact. The server integrates various security tools like Nmap, Metasploit, and sqlmap through a secure MCP interface. It supports both local and remote setups with proper security considerations.

Try asking AI

After installing, here are 3 things you can ask your AI assistant:

• execute_command

  Execute terminal commands on a Linux machine.

  Try:Run nmap to scan target portsTry:List files in current directoryTry:Check system information
• dirb_scan

  Perform directory enumeration using Dirb.

  Try:Use Dirb to scan for hidden directories on a websiteTry:Run Dirb against a target URL with custom wordlist
• enum4linux_scan

  Enumerate information about Windows and Samba hosts.

  Try:Run enum4linux against a target IPTry:Enumerate users and shares on a Windows host
• gobuster_scan

  Discover directories and DNS names using Gobuster.

  Try:Use Gobuster to find hidden directories on a web serverTry:Perform DNS subdomain enumeration with Gobuster
• hydra_brute

  Perform brute force attacks on various services using Hydra.

  Try:Brute force SSH login with HydraTry:Test FTP credentials on a target host
• john_ripper

  Crack passwords using John the Ripper.

  Try:Crack password hashes with John the RipperTry:Perform dictionary attack on shadow file
• metasploit_exploit

  Use Metasploit Framework for penetration testing.

  Try:Run a Metasploit exploit against a targetTry:Search for available exploits in Metasploit
• nikto_scan

  Scan web servers for known vulnerabilities with Nikto.

  Try:Run Nikto against a target web serverTry:Scan a website for dangerous files and misconfigurations
• nmap_scan

  Network scanning and host discovery using Nmap.

  Try:Perform a SYN scan on target networkTry:Scan specific ports on a target host
• sqlmap_scan

  Detect and exploit SQL injection vulnerabilities with SQLMap.

  Try:Test a web application for SQL injectionTry:Dump database from vulnerable URL
• wpscan_scan

  Scan WordPress websites for vulnerabilities with WPScan.

  Try:Scan a WordPress site for security issuesTry:Enumerate WordPress plugins and themes
• web_request

  Make custom HTTP requests using curl or similar tools.

  Try:Send a GET request to a specific endpointTry:Test a web application with custom headers

Comparable tools

Installation

sudo apt install mcp-kali-server
kali-server-mcp

git clone https://github.com/Wh0am123/MCP-Kali-Server.git
cd MCP-Kali-Server
python3 -m venv .venv
source .venv/bin/activate
pip install -r requirements.txt
./server.py

./client.py --server http://127.0.0.1:5000

ssh -L 5000:localhost:5000 user@LINUX_IP
./client.py --server http://127.0.0.1:5000

{
  "mcpServers": {
    "kali": {
      "command": "python3",
      "args": ["/path/to/MCP-Kali-Server/client.py"],
      "env": {
        "MCP_SERVER_URL": "http://localhost:5000"
      }
    }
  }
}

Compare MCP-Kali-Server with