kali-mcp is a comprehensive AI-driven penetration testing platform that exposes over 120 MCP tools wrapping 27+ Kali Linux security tools, enabling autonomous or guided offensive security engagements from reconnaissance through exploitation and reporting. Its capabilities include:

• Network Scanning & Discovery: Nmap scans (host discovery, port/service/OS detection, vulnerability, aggressive), fast masscan+nmap combinations, netcat port checks, and banner grabbing.

• Reconnaissance & OSINT: Subdomain enumeration (subfinder, Amass, gobuster DNS), OSINT gathering (theHarvester), WHOIS/DNS lookups (dig, zone transfers), and continuous recon sweeps with asset change detection.

• Web Application Testing: Vulnerability scanning (Nikto, Nuclei, WPScan), directory/vhost/file brute-forcing (gobuster, ffuf), crawling, HTTP request crafting, form submission, link/text extraction, and visual screenshots (gowitness).

• Exploitation & Post-Exploitation: SQL injection (sqlmap), password brute-forcing (Hydra), Metasploit integration (search, run, msfvenom payload generation), exploit searching (searchsploit, CVE-to-exploit mapping), automated scan-to-exploit chains, SSH command execution, privilege escalation enumeration, and SMB/Windows enumeration (enum4linux, smbclient).

• Traffic Analysis: PCAP credential extraction, protocol hierarchy analysis, and tshark queries.

• AI-Optimized Workflows: Parallel multi-tool scans (scan_host, scan_web), intelligent finding triage with attack path analysis, and correlation of findings into compound attack chains.

• Engagement & Asset Management: Full engagement lifecycle, scoping with allow/deny targets, persistent asset inventory, and scan-to-scan asset diffing.

• Credential Management: Encrypted vault for storing, listing, reusing, and deleting discovered credentials.

• Reporting & Validation: Automated report generation (Markdown/HTML) with attack chains and remediation advice, structured finding extraction, and a validation workflow to confirm or dismiss findings.

• Job & System Management: Asynchronous job handling (submit, status, output, cancel), server health checks, file artifact management, and runtime scope enforcement.

This platform fully automates the penetration testing lifecycle, transforming any MCP-capable AI into a powerful offensive security assistant.

Provides tools for running Kali Linux security tools, enabling AI agents to perform penetration testing, vulnerability scanning, and attack chain analysis on authorized targets.

1. Click on "Install Server".

2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.

3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@kali-mcp Scan 10.10.10.5 and tell me what's worth attacking."

That's it! The server will respond to your query, and you can continue using it as needed.

Here is a step-by-step guide with screenshots.