chungus-kali-mcp
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| VPN_DIR | No | Directory for VPN config files (.ovpn, WireGuard) | ~/.chungus-kali-mcp/vpn |
| HTB_ROUTES | No | Comma-separated CIDRs to route (e.g. 10.129.0.0/16,10.10.0.0/16) | |
| EXTRA_HOSTS | No | Comma-separated hostname:ip pairs added to /etc/hosts | |
| BLOCKING_TIMEOUT | No | Streaming startup detection timeout (seconds) | 30 |
| CHUNGUS_KALI_MCP_TMP_DIR | No | Working directory for scans, payloads, CTF files | ~/.chungus-kali-mcp/tmp |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| kali_execB | Execute ANY command on the Kali server without restrictions. Full root access. |
| exec_streamC | Execute a command with streaming output collection. |
| healthA | Check server health and tool availability. |
| system_network_infoA | Get comprehensive network information for the Kali system. |
| send_inputC | Send text input to any active interactive session. |
| read_outputC | Read output from any active interactive session. |
| tools_nmapC | Execute an Nmap scan. |
| tools_niktoD | Execute Nikto. |
| tools_ssh_auditD | Execute ssh-audit. |
| tools_gobusterD | Execute Gobuster. |
| tools_wpscanD | Execute WPScan. |
| tools_sqlmapD | Execute SQLMap. |
| tools_hydraD | Execute Hydra. |
| tools_johnD | Execute John. |
| tools_enum4linuxD | Execute enum4linux. |
| tools_subfinderD | Execute subfinder. |
| tools_httpxD | Execute httpx. |
| tools_arjunD | Execute arjun. |
| tools_fierceD | Execute fierce. |
| tools_byp4xxD | Execute byp4xx. |
| tools_subzyD | Execute subzy. |
| tools_assetfinderD | Execute assetfinder. |
| tools_waybackurlsD | Execute waybackurls. |
| tools_masscanD | Execute masscan. |
| tools_katanaD | Execute katana. |
| tools_sslscanD | Execute sslscan. |
| tools_crtshD | Query crt.sh. |
| tools_gowitnessD | Execute gowitness. |
| tools_amassD | Execute amass. |
| cve_searchC | Search CVEs. |
| cve_package_auditD | Audit package. |
| tools_nucleiC | Execute Nuclei vulnerability scan. |
| tools_ffufC | Execute FFUF web fuzzer. |
| tools_dirbC | Execute Dirb web content scanner. |
| tools_hashcatD | Execute Hashcat. |
| tools_commixC | Execute Commix command injection scanner. |
| tools_dalfoxC | Execute Dalfox XSS scanner. |
| tools_ghauriC | Execute Ghauri SQL injection scanner. |
| tools_whatwebC | Execute WhatWeb technology detection. |
| tools_massdnsD | Execute MassDNS resolver. |
| tools_mapcidrD | Execute mapcidr CIDR utilities. |
| forensics_binwalkC | Analyze firmware/files with binwalk. |
| forensics_steghideD | Steganography with steghide or stegseek. |
| forensics_exiftoolB | Read/write file metadata with exiftool. |
| forensics_foremostC | Carve files with foremost. |
| forensics_stringsC | Extract strings from a binary. |
| forensics_volatilityD | Memory forensics with Volatility3. |
| js_getjsC | Extract JavaScript files from a URL. |
| js_jsluiceC | Extract URLs and secrets from JavaScript. |
| js_xnlinkfinderC | Discover links and parameters from JavaScript. |
| js_paramspiderC | Discover parameters from web archives. |
| js_trufflehogC | Scan for secrets with TruffleHog. |
| js_beautifyC | Deobfuscate/beautify JavaScript. |
| parse_tool_outputB | Parse raw security tool output into structured JSON. |
| hosts_addC | Add entries to /etc/hosts. |
| hosts_removeB | Remove hostname from /etc/hosts. |
| hosts_listA | List managed /etc/hosts entries. |
| hosts_clearA | Clear managed /etc/hosts entries. |
| exploit_searchC | Search exploits via searchsploit. |
| exploit_suggest_from_nmapC | Suggest exploits from nmap output. |
| exploit_suggest_for_serviceC | Suggest exploits for a service. |
| exploit_detailsC | Get exploit details. |
| exploit_copyC | Copy exploit to destination. |
| fingerprint_urlC | Fingerprint a URL. |
| fingerprint_wafC | Detect WAF. |
| fingerprint_headersC | Analyze security headers. |
| api_graphql_introspectD | GraphQL introspection. |
| api_graphql_fuzzD | GraphQL fuzz. |
| api_jwt_analyzeD | Analyze JWT. |
| api_jwt_crackD | Crack JWT. |
| api_fuzz_endpointC | Fuzz API endpoint. |
| api_rate_limit_testD | Test rate limiting. |
| api_auth_bypass_testD | Test auth bypass. |
| api_ffuf_fuzzD | FFUF fuzz. |
| api_kiterunner_scanD | Kiterunner scan. |
| api_nuclei_scanD | Nuclei API scan. |
| api_newman_runC | Run Newman collection. |
| ad_tools_statusB | Check AD tool availability. |
| ad_bloodhound_collectD | BloodHound collection. |
| ad_secretsdumpD | Impacket secretsdump. |
| ad_kerberoastD | Kerberoasting. |
| ad_asreproastD | AS-REP roasting. |
| ad_psexecD | PsExec. |
| ad_wmiexecD | WMIExec. |
| ad_ldap_enumD | LDAP enumeration. |
| ad_password_sprayD | Password spray. |
| ad_smb_enumD | SMB enumeration. |
| ad_responderC | Start Responder LLMNR/NBT-NS poisoner. |
| ad_evil_winrmC | WinRM shell via evil-winrm. |
| ad_certipyC | ADCS attacks via certipy-ad. |
| ad_bloodyadC | AD privilege escalation via bloodyAD. |
| ad_coerceC | Coerce authentication (coercer or petitpotam). |
| reverse_shell_listener_startC | Start reverse shell listener. |
| reverse_shell_commandC | Run command in reverse shell. |
| reverse_shell_send_payloadD | Send payload via reverse shell. |
| reverse_shell_statusD | Reverse shell status. |
| reverse_shell_stopC | Stop reverse shell. |
| reverse_shell_upload_contentC | Upload content via reverse shell. |
| reverse_shell_download_contentC | Download via reverse shell. |
| reverse_shell_generate_payloadC | Generate reverse shell payload. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 155 tools
Most tools have clearly distinct purposes, with domain-specific prefixes (tools_, forensics_, ad_, etc.) that clarify intent. However, some overlap exists, such as kali_exec vs exec_stream both executing arbitrary commands, and tools_ffuf vs api_ffuf_fuzz having very similar functionality with only context differentiating them.
The naming is dominated by domain prefixes (e.g., reverse_shell_, pivot_, ctf_), but the verb/noun order varies considerably across the set. Some tools use noun_verb (hosts_list, exploit_search), others use verb_noun (cve_search, send_input), and some are bare tool names (tools_nmap, ad_responder). This mixing is readable but not fully consistent.
With 155 tools, the server is extremely over-scoped. The number far exceeds the typical 3-15 range and even the '50+' threshold for an extreme mismatch. This overwhelming count makes it difficult for an agent to efficiently select the right tool, severely reducing coherence.
The tool set covers a broad penetration testing lifecycle: recon (nmap, subfinder), exploitation (searchsploit, msf), post-exploitation (reverse shells, SSH, pivoting), AD attacks, web/API testing, forensics, and CTF helpers. The coverage is quite thorough, with only minor gaps such as a generic session manager to enumerate all active interactive sessions.