kali-mcp-server
Allows searching for exploits and retrieving detailed module information from the Metasploit framework.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@kali-mcp-serverScan example.com for open ports"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
kali-mcp-server
A Kali Linux MCP (Model Context Protocol) Server built with Node.js for seamless integration with LLMs such as Claude, or any MCP-compatible client. It offers powerful network security and penetration testing tools like Nmap, Whois, Dig, Ping, Nikto, Hydra, and SQLMap inside a Dockerized Kali Linux setup.
DISCLAIMER !! IMPORTANT LEGAL NOTICE: This repository and the tools, code, scripts, configurations, documentation, and other materials contained herein (collectively, the “Materials”) are provided solely for lawful, educational, and authorized security-testing purposes. The author(s) and maintainers make no representations or warranties regarding the suitability, accuracy, completeness, or fitness of the Materials for any particular purpose.
Features
nmap_scan: Network scanning & host discoverywhois_lookup: Domain registration info lookupdig_dns: DNS record queryingping_host: ICMP ping testnetcat_connect: TCP/UDP port testingnikto_scan: Web vulnerability scanningsqlmap_scan: SQL Injection testinghydra_bruteforce: Login brute force attacks (controlled environment)dns_enum: DNS enumerationsubdomain_enum: Subdomain discoveryssl_scan: SSL/TLS certificate inspectionmetasploit_search: Search exploits from Metasploit DBmetasploit_exploit_info: Get detailed exploit module infoset_info: Check if Social Engineering Toolkit is installedtraceroute: Network path tracinghost_discovery: Active host discovery
Related MCP server: Zebbern Kali MCP
Project Structure
kali-mcp-server/
├── Dockerfile
├── server.js
├── package.json
├── claude-config.json
├── .dockerignore
├── FEATURES.md
├── README.md
├── DISCLAIMER.md
├── LICENSE
└── screenshots/
├── scan_report.png
├── ssh_bruteforce.png
├── tools_list_1.png
├── tools_list_2.png
└── tools_menu.pngQuick Start
# Prequisitives
node server.js
Docker1. Clone and Build Docker Image
git clone https://github.com/rangta10/kali-mcp-server.git
cd kali-mcp-server
docker build -t kali-mcp-server .2. Run the Server
docker run -it kali-mcp-server3. Config Claude AI
*Install Claude Desktop
*Turn on Claude Dveloper from settings
*Navigate To
C:\Users\<YourUsername>\AppData\Roaming\ClaudeEdit this File
claude_desktop_config.jsonClaude_desktop_config.json
{
"mcpServers": {
"filesystem": {
"command": "npx",
"args": [
"-y",
"@modelcontextprotocol/server-filesystem",
"C:\\Users\\annan\\Desktop",
"C:\\Users\\annan\\Downloads"
]
},
"kali-mcp-server": {
"command": "docker",
"args": [
"run",
"--rm",
"-i",
"--privileged",
"--cap-add=NET_ADMIN",
"--cap-add=NET_RAW",
"kali-mcp-server:latest",
"node",
"/app/server.js"
]
}
}
}Dockerfile
# kali-mcp-server (by rangta)
FROM kalilinux/kali-rolling
RUN apt update && apt install -y \
nmap whois dnsutils netcat-traditional nikto sqlmap hydra dnsenum sslscan metasploit-framework set traceroute nodejs npm
WORKDIR /app
COPY . .
RUN npm install || true
CMD ["node", "server.js"]server.js
(unchanged from the repository — contains your MCP tool definitions and handlers, with copyright signature rangta)
LICENSE
License
Copyright (c) 2025 rangta
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND.Screenshots
nmap scan
This server cannot be deployed
Maintenance
Related MCP Connectors
Security scanner for MCP servers. Detect vulnerabilities, prompt injection, and tool poisoning.
MCP server for Pentest-Tools.com: run scans, manage findings and reports via your preffered LLM.
The Remote MCP server acts as a standardized bridge between LLM applications (like Claude, ChatGPT, and Cursor) and external services, enabling AI agents to access external tools and resources. Its primary capability is providing a centralized search tool to discover other MCP servers and their respective tools. Unlike local implementations, it runs remotely with OAuth authentication and permission controls for security.
MEOK MCP Hardening MCP — automated security red-team for any MCP server. Maps OWASP LLM Top 10
Related MCP Servers
- FlicenseNot gradedqualityCmaintenanceA penetration testing MCP server that runs 20 hacking tools inside a Kali Linux Docker container, enabling AI assistants to execute security scans and attacks via natural language.2-
- AlicenseCqualityAmaintenanceA Docker-based MCP server that grants AI agents direct access to a comprehensive Kali Linux penetration testing toolkit through an isolated container environment.13169 PyPI49MIT
- FlicenseNot gradedqualityDmaintenanceA Dockerized Kali Linux MCP server that enables LLMs to perform network security scans, penetration testing, and reconnaissance using tools like Nmap, Nikto, Hydra, and SQLMap.14 npm-
- FlicenseNot gradedqualityBmaintenanceExposes a hardened Docker container with Kali Linux security tools (nmap, sqlmap, dig, whois, etc.) as MCP tools, enabling network reconnaissance, web analysis, and vulnerability scanning through natural language commands.-