Skip to main content
Glama
Sign In

Kali Linux MCP Server

by sfz009900
GitHub
TypeScript
5
OverviewInspectNewSchemaRelated ServersReviewsScore
Need Help?View Source CodeReport Issue

Integrations

  • Enables execution of Burp Suite commands for web application security testing, though with limitations on interactive features and UI-based interactions.

  • Provides access to Kali Linux penetration testing tools and commands via an SSH connection, allowing execution of security testing operations in a containerized environment.

  • Allows running Metasploit penetration testing commands in non-interactive mode, supporting security testing and exploitation workflows without entering interactive command mode.

目前只是个玩具,只支持执行可以返回的命令,如burp suite和metasploit等不能进行界面和命令交互,metasploit倒是可以叫ai agent直接执行不进入命令交互模式,有时间弄得的哥们可以拿去加强一下 😜

kalilinuxmcp

kali linux mcp,pentest,penetration test

更新:

20250401更新: 新增简单的交互式处理

如何安装:

1: 首先要用ssh-keygen -t rsa做一个私钥和公钥,替换公钥到Dockerfile的,替换私钥到"C:\Users[Username].ssh\kali000",这里自行去src\index.ts里搜索"kali000"替换路径

'ssh-rsa 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 hack004@DESKTOP-H4HRI73'

2:因为是国内环境,docker里我加了使用主机的socks5代理,自行搜索来替换"192.168.31.110",还有dns服务器也强制用dns2socks转到了本地127.0.0.1使用socks5代理,可自行去Dockerfile里替换或者去掉

3:原始使用的"booyaabes/kali-linux-full"镜像,但是里面软件版本有点老,自行选择是否要执行以下操作更新(主要需要更新很久!)

1:wget -q -O - https://archive.kali.org/archive-key.asc | gpg --import 2:curl -fsSL https://archive.kali.org/archive-key.asc | sudo gpg --dearmor -o /usr/share/keyrings/kali-archive-keyring.gpg 3:sudo apt update && sudo apt full-upgrade -y 4:(下载更新最新版kali linux的所有工具,注意很大很慢)sudo apt install kali-linux-everything -y 5:如果只需更新单独的软件,就无需执行4因为要很久,例如sudo apt install wpscan 6:我自己倒是完成了最新更新,但是容器太大了几十G就不传了,需要的自行操作就行了```

4:(编译MCP),先npm install后直接npm run build,得到build目录,核心是index.js

5:(编译Docker镜像),

1:编译镜像:"docker build -t kali-pentest-mcp ." 2:部署镜像:"docker run --name kali-container -d --privileged -p 2222:22 kali-pentest-mcp"

6:安装MCP:

"kali-pentest-mcp-server": { "command": "node", "args": ["D:/kalimcp/build/index.js"], "env": {} }

注意事项:

1: 每次重启docker后记得刷新MCP,因为可能SSH连接会断开

参考项目:

https://github.com/weidwonder/terminal-mcp-server

效果展示:

1:Lab: Blind SQL injection with out-of-band data exfiltration

2:command injection:

3:Lab: Web shell upload via Content-Type restriction bypass

You must be authenticated.

A
security – no known vulnerabilities
F
license - not found
A
quality - confirmed to work

local-only server

The server can only run on the client's local machine because it depends on local resources.

Tools

A tool that allows penetration testing through Kali Linux commands executed via a Multi-Conversation Protocol server, supporting security testing operations like SQL injection and command execution.

  1. 更新:
    1. 如何安装:
      1. 1: 首先要用ssh-keygen -t rsa做一个私钥和公钥,替换公钥到Dockerfile的,替换私钥到"C:\Users[Username].ssh\kali000",这里自行去src\index.ts里搜索"kali000"替换路径
        1. 2:因为是国内环境,docker里我加了使用主机的socks5代理,自行搜索来替换"192.168.31.110",还有dns服务器也强制用dns2socks转到了本地127.0.0.1使用socks5代理,可自行去Dockerfile里替换或者去掉
          1. 3:原始使用的"booyaabes/kali-linux-full"镜像,但是里面软件版本有点老,自行选择是否要执行以下操作更新(主要需要更新很久!)
            1. 4:(编译MCP),先npm install后直接npm run build,得到build目录,核心是index.js
              1. 5:(编译Docker镜像),
                1. 6:安装MCP:
                  1. 注意事项:
                    1. 参考项目:
                      1. 效果展示:
                        1. 1:Lab: Blind SQL injection with out-of-band data exfiltration
                          1. 2:command injection:
                            1. 3:Lab: Web shell upload via Content-Type restriction bypass

                              Related MCP Servers

                              • Mythic MCP

                                xpn
                                -
                                security
                                F
                                license
                                -
                                quality
                                A demonstration server that allows large language models to perform penetration testing tasks autonomously by interfacing with the Mythic C2 framework.
                                Last updated -
                                11
                                Python
                                • Apple

                              • MCP Server Pentest

                                9olidity
                                A
                                security
                                A
                                license
                                A
                                quality
                                A security testing tool that enables automated vulnerability detection including XSS and SQL injection, along with comprehensive browser interaction capabilities for web application penetration testing.
                                Last updated -
                                12
                                327
                                5
                                JavaScript
                                MIT License

                              • Qase MCP Server

                                RayYokoyama
                                -
                                security
                                F
                                license
                                -
                                quality
                                A Model Context Protocol server that integrates with the Qase test management platform, allowing users to create and retrieve test cases, manage test runs, and interact with Qase projects.
                                Last updated -
                                1
                                JavaScript

                              • Pentest MCP

                                DMontgomery40
                                A
                                security
                                F
                                license
                                A
                                quality
                                A Model Context Protocol server that integrates essential penetration testing tools (Nmap, Gobuster, Nikto, John the Ripper) into a unified natural language interface, allowing security professionals to execute and chain multiple tools through conversational commands.
                                Last updated -
                                8
                                1
                                TypeScript
                                • Linux
                                • Apple

                              View all related MCP servers

                              Appeared in Searches

                              New MCP Servers

                              ID: yeqbc7qpa9