┌─────────────────┐    HTTP + SSE     ┌──────────────────────┐    stdin/stdout    ┌─────────────────┐    node-pty    ┌─────────────────┐
│  AI 客户端       │ ───────────────► │  Python 主控服务器    │ ────────────────► │  Node.js PTY    │ ─────────────► │  Kali Linux     │
│  Claude/Cursor  │  X-Kali-Token    │  FastMCP + Uvicorn    │  JSON-RPC 2.0     │  引擎           │  spawn/write   │  Shell (root)   │
│                 │ ◄─────────────── │  TokenAuthMiddleware  │ ◄──────────────── │  (node-pty)     │ ◄───────────── │                 │
└─────────────────┘    SSE 流         └──────────────────────┘    pty.output      └─────────────────┘    输出回传     └─────────────────┘

cp -r kali-mcp /opt/kali-mcp
cd /opt/kali-mcp

python3 -m venv venv
source venv/bin/activate
pip install -r requirements.txt

cd pty_engine
npm install
cd ..

python3 -c "from mcp.server.fastmcp import FastMCP; print('Python 依赖 OK')"
cd pty_engine && node -e "import('node-pty').then(()=>console.log('Node PTY OK'))" && cd ..

python3 mcp_kali_server.py [--host addr:port] [-t PASSWORD]

# 先激活虚拟环境
source venv/bin/activate

# 1. 本地调试（无认证，仅监听本机）
python3 mcp_kali_server.py --host 127.0.0.1:8000

# 2. 局域网开放 + 密码认证（推荐）
python3 mcp_kali_server.py --host 0.0.0.0:8000 -t MySecretPass123

# 3. 自定义端口
python3 mcp_kali_server.py --host 0.0.0.0:9000 -t MySecretPass123

# 4. 查看帮助
python3 mcp_kali_server.py --help

INFO - === Kali-MCP Server Starting (Root Mode) ===
INFO - Node.js version: v18.x.x
INFO - PTY Engine started successfully
INFO - 密码认证已启用
INFO - Kali-MCP Server ready
INFO - Uvicorn running on http://0.0.0.0:8000

WARNING - 认证已禁用，仅建议本地调试使用

# 示例：放大输出队列到 10000
KALI_QUEUE_SIZE=10000 python3 mcp_kali_server.py -t MyPass

# 使用 nohup 简单后台运行
nohup python3 mcp_kali_server.py --host 0.0.0.0:8000 -t MySecretPass123 > /dev/null 2>&1 &

# 或使用 systemd（推荐）
cat > /etc/systemd/system/kali-mcp.service <<'EOF'
[Unit]
Description=Kali-MCP Server
After=network.target

[Service]
Type=simple
WorkingDirectory=/opt/kali-mcp
ExecStart=/usr/bin/python3 /opt/kali-mcp/mcp_kali_server.py --host 0.0.0.0:8000 -t MySecretPass123
Restart=on-failure
RestartSec=5

[Install]
WantedBy=multi-user.target
EOF
systemctl daemon-reload
systemctl enable --now kali-mcp

{
  "mcpServers": {
    "kali-terminal": {
      "url": "http://192.168.1.100:8000/sse",
      "headers": {
        "X-Kali-Token": "MySecretPass123"
      }
    }
  }
}

{
  "mcpServers": {
    "kali-terminal": {
      "url": "http://192.168.1.100:8000/sse",
      "headers": {
        "X-Kali-Token": "MySecretPass123"
      }
    }
  }
}

{
  "mcpServers": {
    "kali-terminal": {
      "url": "http://192.168.1.100:8000/sse?token=MySecretPass123"
    }
  }
}

# 无密码模式
curl -N http://127.0.0.1:8000/sse

# Header 方式认证
curl -N -H "X-Kali-Token: MySecretPass123" http://192.168.1.100:8000/sse

# 查询参数方式认证
curl -N "http://192.168.1.100:8000/sse?token=MySecretPass123"

# 错误密码测试（应返回 401）
curl -i -H "X-Kali-Token: wrong" http://192.168.1.100:8000/sse

1. create_session(session_id="shell-1")          # 创建会话
2. send_line(session_id="shell-1", line="ls -la") # 执行命令
3. read_output(session_id="shell-1")              # 读取结果
4. send_line(session_id="shell-1", line="nmap -sV 192.168.1.0/24")
5. wait_for(session_id="shell-1", pattern="Nmap done", timeout=300)
6. read_output(session_id="shell-1", lines=100)
7. close_session(session_id="shell-1")             # 清理

server {
    listen 443 ssl;
    server_name kali.example.com;

    ssl_certificate     /etc/ssl/certs/kali.pem;
    ssl_certificate_key /etc/ssl/private/kali.key;

    location / {
        proxy_pass http://127.0.0.1:8000;
        proxy_http_version 1.1;
        proxy_set_header Connection "";
        proxy_buffering off;           # SSE 必须关闭缓冲
        proxy_read_timeout 86400s;     # 长连接超时
        proxy_set_header Host $host;
    }
}

# 实时查看服务日志
tail -f logs/mcp.log

# 查看认证失败记录
grep "认证失败" logs/mcp.log

# 查看 PTY 引擎输出
grep "\[PTY-Engine\]" logs/mcp.log

cd pty_engine
rm -rf node_modules package-lock.json
npm install

kali-mcp/
├── mcp_kali_server.py      # Python 主控服务器（入口）
├── requirements.txt        # Python 依赖
├── pty_engine/
│   ├── index.js            # Node.js PTY 引擎
│   ├── package.json        # Node.js 依赖
│   └── package-lock.json
├── venv/                   # 部署时手动创建
└── logs/                   # 运行时自动创建
    └── mcp.log