MCP-Kali-Server

概述

MCP Kali Server 是一个轻量级 API 桥接，将 MCP 客户端连接到 Kali Linux 机器，实现 AI 辅助渗透测试和 CTF 挑战解决。它提供受控的命令执行能力，使 AI 模型能够交互式执行终端命令。服务器通过安全的 MCP 接口集成多种安全工具，如 Nmap、Metasploit 和 sqlmap。它支持本地和远程设置，并考虑了适当的安全性。

试试问 AI

装完之后，这里有 3 个你可以让 AI 做的事：

• execute_command

  Execute terminal commands on a Linux machine.

  试试:Run nmap to scan target ports试试:List files in current directory试试:Check system information
• dirb_scan

  Perform directory enumeration using Dirb.

  试试:Use Dirb to scan for hidden directories on a website试试:Run Dirb against a target URL with custom wordlist
• enum4linux_scan

  Enumerate information about Windows and Samba hosts.

  试试:Run enum4linux against a target IP试试:Enumerate users and shares on a Windows host
• gobuster_scan

  Discover directories and DNS names using Gobuster.

  试试:Use Gobuster to find hidden directories on a web server试试:Perform DNS subdomain enumeration with Gobuster
• hydra_brute

  Perform brute force attacks on various services using Hydra.

  试试:Brute force SSH login with Hydra试试:Test FTP credentials on a target host
• john_ripper

  Crack passwords using John the Ripper.

  试试:Crack password hashes with John the Ripper试试:Perform dictionary attack on shadow file
• metasploit_exploit

  Use Metasploit Framework for penetration testing.

  试试:Run a Metasploit exploit against a target试试:Search for available exploits in Metasploit
• nikto_scan

  Scan web servers for known vulnerabilities with Nikto.

  试试:Run Nikto against a target web server试试:Scan a website for dangerous files and misconfigurations
• nmap_scan

  Network scanning and host discovery using Nmap.

  试试:Perform a SYN scan on target network试试:Scan specific ports on a target host
• sqlmap_scan

  Detect and exploit SQL injection vulnerabilities with SQLMap.

  试试:Test a web application for SQL injection试试:Dump database from vulnerable URL
• wpscan_scan

  Scan WordPress websites for vulnerabilities with WPScan.

  试试:Scan a WordPress site for security issues试试:Enumerate WordPress plugins and themes
• web_request

  Make custom HTTP requests using curl or similar tools.

  试试:Send a GET request to a specific endpoint试试:Test a web application with custom headers

可对比工具

安装

sudo apt install mcp-kali-server
kali-server-mcp

git clone https://github.com/Wh0am123/MCP-Kali-Server.git
cd MCP-Kali-Server
python3 -m venv .venv
source .venv/bin/activate
pip install -r requirements.txt
./server.py

./client.py --server http://127.0.0.1:5000

ssh -L 5000:localhost:5000 user@LINUX_IP
./client.py --server http://127.0.0.1:5000

{
  "mcpServers": {
    "kali": {
      "command": "python3",
      "args": ["/path/to/MCP-Kali-Server/client.py"],
      "env": {
        "MCP_SERVER_URL": "http://localhost:5000"
      }
    }
  }
}

MCP-Kali-Server 对比