Back to Home
rangta10 icon

kali-mcp-server

by rangta10

Overview

Integrate Kali Linux penetration testing tools with LLMs (e.g., Claude) via the Model Context Protocol for automated security testing and reconnaissance.

Installation

Run Command
docker run --rm -i --privileged --cap-add=NET_ADMIN --cap-add=NET_RAW kali-mcp-server:latest node /app/server.js

Security Notes

CRITICAL: The `server.js` file directly interpolates user-supplied arguments into `exec` calls (e.g., for nmap, whois, sqlmap) without explicit input sanitization, leading to potential arbitrary command injection (Remote Code Execution) if malicious inputs are provided by the LLM or an attacker. Furthermore, the Docker container runs with `--privileged`, `--cap-add=NET_ADMIN`, and `--cap-add=NET_RAW` capabilities, granting extensive and dangerous permissions that could compromise the host system if the container is exploited.

Similar Servers

Stats

Interest Score33
Security Score2
Cost ClassLow
Avg Tokens800
Stars2
Forks0
Last Update2025-11-22

Tags

Kali LinuxPenetration TestingLLM IntegrationNetwork SecurityDocker