# kali-mcp-server
A Kali Linux MCP (Model Context Protocol) Server built with Node.js for seamless integration with LLMs such as Claude, or any MCP-compatible client. It offers powerful network security and penetration testing tools like Nmap, Whois, Dig, Ping, Nikto, Hydra, and SQLMap inside a Dockerized Kali Linux setup.

---

> **DISCLAIMER — IMPORTANT LEGAL NOTICE: This repository and the tools, code, scripts, configurations, documentation, and other materials contained herein (collectively, the “Materials”) are provided solely for lawful, educational, and authorized security-testing purposes. The author(s) and maintainers make no representations or warranties regarding the suitability, accuracy, completeness, or fitness of the Materials for any particular purpose.**

---

## 🧠 Features

* `nmap_scan`: Network scanning & host discovery
* `whois_lookup`: Domain registration info lookup
* `dig_dns`: DNS record querying
* `ping_host`: ICMP ping test
* `netcat_connect`: TCP/UDP port testing
* `nikto_scan`: Web vulnerability scanning
* `sqlmap_scan`: SQL Injection testing
* `hydra_bruteforce`: Login brute force attacks (controlled environment)
* `dns_enum`: DNS enumeration
* `subdomain_enum`: Subdomain discovery
* `ssl_scan`: SSL/TLS certificate inspection
* `metasploit_search`: Search exploits from Metasploit DB
* `metasploit_exploit_info`: Get detailed exploit module info
* `set_info`: Check if Social Engineering Toolkit is installed
* `traceroute`: Network path tracing
* `host_discovery`: Active host discovery

---

## 📁 Project Structure

```
kali-mcp-server/
├── Dockerfile
├── server.js
├── package.json
├── claude-config.json
├── .dockerignore
├── FEATURES.md
├── README.md
├── DISCLAIMER.md
├── LICENSE
└── screenshots/
    ├── scan_report.png
    ├── ssh_bruteforce.png
    ├── tools_list_1.png
    ├── tools_list_2.png
    └── tools_menu.png
```

---
---

## 🚀 Quick Start

### # Prequisitives

```bash
node server.js
Docker
```

### 1. Clone and Build Docker Image

```bash
git clone https://github.com/rangta10/kali-mcp-server.git
cd kali-mcp-server
docker build -t kali-mcp-server .
```

### 2. Run the Server

```bash
docker run -it kali-mcp-server
```

### 3. Config Claude AI

### *Install Claude Desktop
### *Turn on Claude Dveloper from settings
### *Navigate To

```bash
C:\Users\<YourUsername>\AppData\Roaming\Claude
```
### Edit this File 
```
claude_desktop_config.json
```

## Claude_desktop_config.json
```claude_desktop_config.json
{
  "mcpServers": {
    "filesystem": {
      "command": "npx",
      "args": [
        "-y",
        "@modelcontextprotocol/server-filesystem",
        "C:\\Users\\annan\\Desktop",
        "C:\\Users\\annan\\Downloads"
      ]
    },
    "kali-mcp-server": {
      "command": "docker",
      "args": [
        "run",
        "--rm",
        "-i",
        "--privileged",
        "--cap-add=NET_ADMIN",
        "--cap-add=NET_RAW",
        "kali-mcp-server:latest",
        "node",
        "/app/server.js"
      ]
    }
  }
}
```



---

## 🐳 Dockerfile

```Dockerfile
# kali-mcp-server (by rangta)
FROM kalilinux/kali-rolling

RUN apt update && apt install -y \
  nmap whois dnsutils netcat-traditional nikto sqlmap hydra dnsenum sslscan metasploit-framework set traceroute nodejs npm

WORKDIR /app
COPY . .
RUN npm install || true

CMD ["node", "server.js"]
```

--- 

## ⚙️ server.js

(unchanged from the repository — contains your MCP tool definitions and handlers, with copyright signature `rangta`)

--- 

## 📜 LICENSE 

```text
 License

Copyright (c) 2025 rangta

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND.
```

## 📸 Screenshots

![nmap scan](screenshots/scan_report.png)
*nmap scan*



---