kali-mcp-server

The server's core `run_command` function utilizes `subprocess.run(shell=True)`, which poses a potential command injection risk if input is not meticulously sanitized. Although efforts are made to escape specific parameters within tool wrappers, relying on `shell=True` without comprehensive `shlex.quote` on all user-supplied components is less secure than `shell=False`. The container requires elevated Docker capabilities (`NET_RAW`, `NET_ADMIN`), inherently increasing the attack surface. However, the project mitigates this by providing extensive legal/ethical warnings, implementing Docker-level and per-process resource limits, and explicitly detailing security best practices and isolation recommendations.