kali-mcp-server
by rangta10
Overview
Integrate Kali Linux penetration testing tools with LLMs (e.g., Claude) via the Model Context Protocol for automated security testing and reconnaissance.
Installation
docker run --rm -i --privileged --cap-add=NET_ADMIN --cap-add=NET_RAW kali-mcp-server:latest node /app/server.jsSecurity Notes
CRITICAL: The `server.js` file directly interpolates user-supplied arguments into `exec` calls (e.g., for nmap, whois, sqlmap) without explicit input sanitization, leading to potential arbitrary command injection (Remote Code Execution) if malicious inputs are provided by the LLM or an attacker. Furthermore, the Docker container runs with `--privileged`, `--cap-add=NET_ADMIN`, and `--cap-add=NET_RAW` capabilities, granting extensive and dangerous permissions that could compromise the host system if the container is exploited.
Similar Servers
rmcp
Perform sophisticated statistical analysis, econometrics, machine learning, and time series tasks using natural language conversations with AI assistants, demonstrating capabilities through a web interface.
ls-mcp
Command-line tool for discovering, analyzing, and reporting on Model Context Protocol (MCP) server configurations in a local development environment.
sub-agents-mcp
Provides a Model Context Protocol (MCP) server to enable Claude Code–style sub-agent workflows in any MCP-compatible tool, executing agents via various AI CLI backends.
kernel-mcp-server
Provides AI assistants with secure access to Kernel platform tools for browser automation, app deployment, and monitoring.