redteam-mcp
🔴 Red Team MCP 服务器
一个强大的渗透测试 MCP 服务器,在 Kali Linux Docker 容器中运行 20 种真实黑客工具,并将它们直接连接到 Cursor、Claude 或任何兼容 MCP 的 IDE 等 AI 助手。
无需手动输入命令,只需用简单的英语提问:
“扫描 192.168.1.1 上的端口” “查找 example.com 的子域名” “检查该网站是否存在 SQL 注入”
AI 会调用正确的工具,在 Kali Linux 中运行它,并将结果反馈给你。
🛠️ 包含的工具(共 20 种)
工具 | 用途 |
nmap | 端口与服务扫描 |
gobuster | 目录爆破 |
ffuf | Web 模糊测试 |
sqlmap | SQL 注入 |
nikto | Web 漏洞扫描 |
nuclei | 基于模板的漏洞扫描 |
whatweb | 技术指纹识别 |
subfinder | 子域名枚举 |
httpx | HTTP 探测 |
wpscan | WordPress 扫描 |
amass | 攻击面映射 |
hydra | 密码爆破 |
curl | 原始 HTTP 请求 |
dnsrecon | DNS 枚举 |
theHarvester | OSINT 信息收集 |
wafw00f | WAF 检测 |
sslscan | SSL/TLS 审计 |
commix | 命令注入 |
arjun | 隐藏参数发现 |
metasploit | 辅助模块运行器 |
Related MCP server: Zebbern Kali MCP
✅ 要求
在开始之前,请确保已安装以下软件:
Docker Desktop — https://www.docker.com/products/docker-desktop (启用 Linux 容器)
Python 3.11 — https://www.python.org/downloads/release/python-3110 (仅在需要编辑服务器代码时在本地安装;容器会处理其他所有内容)
任何兼容 MCP 的 IDE:Cursor、VS Code + Kiro、Claude Desktop 等。
Python 版本说明:本项目适用于 Python 3.11+。Docker 容器使用 Kali 内置的 Python 3 (3.12)。两者均可正常工作。
🚀 安装步骤
第 1 步 — 克隆仓库
git clone https://github.com/YOUR_USERNAME/redteam-mcp.git
cd redteam-mcp第 2 步 — 构建 Docker 镜像
这将下载 Kali Linux 并安装所有 20 种工具。首次运行需要 10–20 分钟。
docker build -t redteam-mcp:latest .你只需要运行一次(或者在更新项目时运行)。
第 3 步 — 启动容器
Windows (PowerShell):
.\run.ps1Mac / Linux:
bash run.sh验证它是否正在运行:
docker ps你应该看到 redteam-mcp 的状态为 Up。
第 4 步 — 连接你的 IDE
在 IDE 中打开你的 MCP 配置文件并粘贴以下内容:
{
"mcpServers": {
"redteam-kali": {
"command": "docker",
"args": [
"exec", "-i", "redteam-mcp",
"/app/.venv/bin/python", "/app/src/server.py"
],
"disabled": false,
"autoApprove": []
}
}
}粘贴位置:
IDE | 配置文件位置 |
Cursor |
|
VS Code + Kiro | 本项目已在 |
Claude Desktop |
|
粘贴后,重新加载你的 IDE 窗口 (Ctrl+Shift+P → Reload Window)。
第 5 步 — 开始提问
准备就绪。只需用自然语言输入:
Scan ports on scanme.nmap.org
Find subdomains of tesla.com
Check if http://testphp.vulnweb.com has SQL injection
Detect the WAF on cloudflare.com
Run a nikto scan on http://testphp.vulnweb.com📋 日常使用指南
启动项目
.\run.ps1然后重新加载你的 IDE 窗口。
完成后停止
docker stop redteam-mcp重启容器
docker restart redteam-mcp完全重置(如果出现故障)
docker rm -f redteam-mcp
.\run.ps1重建镜像(仅在编辑 Dockerfile 或 server.py 后)
docker rm -f redteam-mcp
docker build -t redteam-mcp:latest .
.\run.ps1检查容器日志
docker logs redteam-mcp在容器内打开 Shell
docker exec -it redteam-mcp /bin/bash⚠️ 法律声明
仅在你有权测试或拥有明确书面许可的系统上使用这些工具。未经授权的扫描是违法的。示例中使用的合法测试目标是 scanme.nmap.org(由 nmap 项目为此目的提供)。
📁 项目结构
redteam-mcp/
├── src/
│ └── server.py # MCP server with all 20 tools
├── Dockerfile # Kali Linux multi-stage build
├── requirements.txt # Python deps (mcp only)
├── run.ps1 # Start container (Windows)
├── run.sh # Start container (Mac/Linux)
└── .kiro/
└── settings/
└── mcp.json # IDE MCP configThis server cannot be installed
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Servers
- FlicenseNot gradedqualityBmaintenanceAn MCP server that exposes over 20 standard penetration testing utilities, such as Nmap, SQLMap, and OWASP ZAP, as callable tools for AI agents. It enables natural language control over complex security workflows for automated and interactive penetration testing.93
- AlicenseAqualityDmaintenanceA Docker-based MCP server that grants AI agents direct access to a comprehensive Kali Linux penetration testing toolkit through an isolated container environment.10041MIT
- FlicenseNot gradedqualityCmaintenanceAn MCP server that turns Kali Linux into an AI-driven penetration testing powerhouse, enabling control of 40+ offensive security tools via natural language.
- FlicenseNot gradedqualityDmaintenanceA Dockerized Kali Linux MCP server that enables LLMs to perform network security scans, penetration testing, and reconnaissance using tools like Nmap, Nikto, Hydra, and SQLMap.8
Related MCP Connectors
MCP server for Pentest-Tools.com: run scans, manage findings and reports via your preffered LLM.
Security scanner for MCP servers. Detect vulnerabilities, prompt injection, and tool poisoning.
Scans MCP servers for tool poisoning, prompt injection and supply chain risks.
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/samirjani03/redteam-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server