zebbern-kali-mcp

Overview

Zebbern Kali MCP server is a two-part system that connects AI agents to a full Kali Linux penetration testing environment through the Model Context Protocol. It uses a Docker container running a Flask API to execute security tools like Nmap, Metasploit, SQLMap, and various Active Directory attack utilities. The architecture separates the MCP client (which runs on the host) from the Kali container, allowing isolated tool execution. The project includes 17 different MCP modules covering network scanning, web testing, AD attacks, exploitation, and more.

Try asking AI

After installing, here are 3 things you can ask your AI assistant:

• nmap

  Port scanner with service detection and NSE scripts

  Try:Scan target ports 80 and 443Try:Detect services on 192.168.1.0/24
• sqlmap

  Automated SQL injection detection and exploitation

  Try:Check for SQL injection vulnerabilities in this URLTry:Dump database from vulnerable form
• hydra

  Network login brute-forcer for various protocols

  Try:Brute force SSH on 192.168.1.100Try:Try default FTP login credentials
• nikto

  Web server vulnerability scanner

  Try:Scan a web server for known vulnerabilitiesTry:Check for outdated software on target
• metasploit

  Metasploit Framework integration for exploits and sessions

  Try:List all available exploits for a target OSTry:Open a session with a vulnerability
• command_exec

  Execute arbitrary commands on the Kali container

  Try:List all processes on the systemTry:Check network connections
• subfinder

  Passive subdomain discovery tool

  Try:Find subdomains for example.comTry:Discover all domains related to target
• john

  John the Ripper password cracker

  Try:Crack this hash file using rockyou.txtTry:Try dictionary attack on password hashes
• netexec

  Active Directory attack tool for SMB/LDAP/WinRM

  Try:Enumerate users on a domain controllerTry:Check for SMB shares on a target
• payload_generator

  Generate payloads for various platforms and scenarios

  Try:Create a reverse shell payload for LinuxTry:Generate a meterpreter payload for Windows
• exploit_suggester

  Suggest exploits based on scan results

  Try:Find exploits for Apache 2.4.41Try:Suggest vulnerabilities for this OS version
• vpn

  WireGuard & OpenVPN management with auto SOCKS5 proxy

  Try:Connect to an OpenVPN serverTry:Configure a WireGuard VPN connection

Comparable tools

Installation

# Download just the compose file — no full clone needed
curl -sLO https://raw.githubusercontent.com/zebbern/zebbern-kali-mcp/main/docker-compose.yml
docker compose up -d

{
  "servers": {
    "kali-tools": {
      "command": "uvx",
      "args": ["zebbern-kali-mcp"]
    }
  }
}

{
  "mcpServers": {
    "kali-tools": {
      "command": "uvx",
      "args": ["zebbern-kali-mcp"]
    }
  }
}

Compare zebbern-kali-mcp with