Kali Linux MCP

🚀 Kali_Linux_MCP

Kali_Linux_MCP exposes Kali tools through a Flask API and an MCP bridge, enabling authorized testing in various scenarios and AI - assisted workflows.

🚀 Quick Start

Kali_Linux_MCP provides a way to access Kali tools via an API and an MCP bridge. You can use it in authorized labs, CTFs, HTB/THM machines, or for AI - assisted testing with MCP clients.

✨ Features

• Exposes Kali tools like nmap, gobuster, nikto, sqlmap, metasploit, hydra, john, wpscan, enum4linux through a Flask API.
• Uses an MCP bridge (MCP_Server.py) to forward requests from MCP clients to the API.
• Supports AI - assisted workflows and works with various MCP clients such as Claude Desktop and 5ire.
• Extendable to include other forensic tools.

📦 Installation

Requirements

• Kali Linux (or Linux with tools installed in PATH).
• Python 3 with flask, requests, mcp.

Install Dependencies

pip install flask requests mcp

💻 Usage Examples

Basic Usage

Start the API

python3 Kali_Linux_Server.py --port 5000

Health Check

curl http://localhost:5000/health

Start the MCP Bridge

python3 MCP_Server.py --server http://localhost:5000 --timeout 300

Advanced Usage

Nmap Scan

curl -X POST http://localhost:5000/api/tools/nmap -H "Content-Type: application/json" -d '{"target":"scanme.nmap.org","additional_args":"-sV"}'

WPScan

curl -X POST http://localhost:5000/api/tools/wpscan -H "Content-Type: application/json" -d '{"url":"https://example.com","additional_args":"--enumerate u"}'

MCP Client Configuration

Add MCP config pointing python3 /path/to/MCP_Server.py --server http://LINUX_IP:5000.

📚 Documentation

API Endpoints

• GET /health: Check the status of the tools.
• POST /api/command: Run any command.
• POST /api/tools/<tool>: Wrappers for nmap, gobuster, dirb, nikto, sqlmap, metasploit, hydra, john, wpscan, enum4linux. Each endpoint requires a JSON body with tool - specific arguments (target, url, etc.).

MCP Tools

The bridge registers the following MCP tools: nmap_scan, gobuster_scan, dirb_scan, nikto_scan, sqlmap_scan, metasploit_run, hydra_attack, john_crack, wpscan_analyze, enum4linux_scan, along with execute_command and check_health.

Scenarios

• Reconnaissance: Use nmap_scan to map services.
• Web Enumeration: Employ gobuster_scan or dirb_scan.
• Vulnerability Triage: Run nikto_scan and sqlmap_scan.
• WordPress Checks: Use wpscan_analyze.
• SMB Reconnaissance: Perform enum4linux_scan.
• Credential Tests (Lab Only): Conduct hydra_attack.
• Exploit Check: Run metasploit_run.

🔧 Technical Details

Kali_Linux_MCP has two main components:

• Kali_Linux_Server.py: A Flask API that wraps various Kali tools. It provides endpoints to interact with these tools.
• MCP_Server.py: An MCP bridge using FastMCP. It forwards requests from MCP clients to the API, enabling seamless integration with MCP - based systems.

💡 Usage Tip

• This project supports AI - assisted workflows, where models can suggest and run commands.
• It is compatible with Claude Desktop and 5ire MCP clients.
• You can extend it to include other forensic tools like Volatility and SleuthKit.