kali-mcp-server

The project demonstrates robust security hardening. Input is heavily sanitized to prevent command injection, and all tool execution is whitelisted against an explicit ALLOWED_TOOLS list. Tools run via `subprocess.run` with a list of arguments, avoiding shell interpretation. The Docker container runs as a non-root user with a read-only filesystem and temporary filesystems mounted, further restricting potential damage. Each tool execution includes a 300-second timeout. The container requires elevated network capabilities (`NET_RAW`, `NET_ADMIN`, `NET_BIND_SERVICE`), which are necessary for many penetration testing tools but inherently increase risk. However, these are mitigated by the strong input validation and execution controls.