Kali Security Tools

🚀 awesome-kali-MCPServers

This is a collection of Model Context Protocol (MCP) servers designed specifically for the Kali Linux environment. The project aims to enhance the efficiency of reverse engineering, security testing, and automated workflows by integrating powerful tools and flexible features.

🚀 Quick Start

Follow these steps to quickly start using kali-mcps:

1. Build the Docker Image

Run the following command in the project root directory to build the Docker image (temporarily named as you choose):

docker build -t kali-mcps:latest .

2. Start the MCP Client

Ensure that an MCP client, such as claude desktop, cline, goose, or roo code, is installed. Open the MCP client of your choice.

3. Configure the MCP Client

Create a configuration file (e.g., config.json) in your MCP client with the following content:

{
  "mcpServers": {
    "kali-docker": {
      "command": "docker",
      "args": ["run", "-i", "kali-mcps:latest"]
    }
  }
}

• "kali-docker" is the server name and can be customized.
• "command": "docker" specifies that Docker will be used to run the container.
• "args" defines the Docker run parameters: -i enables interactive mode, and the image name is the just-built kali-mcps:latest.

4. Use Kali Tools

After configuration, connect to the kali-mcps container through the MCP client and start using the built-in Kali tools (such as Nmap, nm, objdump, strings, tshark) for tasks. For example:

• Run basic_scan to perform a basic network scan.
• Use disassemble to decompile the target file.
• Execute capture_live to capture network traffic in real-time.

✨ Features

The following features have been added to this project:

• Network Scanning (Nmap): A powerful network scanning tool for detecting and mapping networks.
• Symbol Analysis (nm): View the symbol information of the target file to help understand the program structure.
• Binary Analysis (objdump): Decompile binary files to obtain assembly code for in-depth analysis.
• String Extraction (strings): Extract all visible character sequences from executable files to identify potential information or vulnerability points.
• Network Traffic Analysis (Wireshark/tshark): Capture and analyze network packets in real-time to identify abnormal traffic patterns.

📦 Sandbox Support

The project provides a Docker-based sandbox environment:

• Default image: ubuntu-systemd:22.04
• Configuration parameters include:
  • Memory Limit: Prevents resource abuse and is set to a reasonable range by default.
  • CPU Limit: Controls the computing power used by the container to avoid affecting the host performance.
  • Network Mode: Choose bridge, host, or none mode to flexibly configure network access.
  • Timeout Duration: Sets the maximum allowed time for task execution to prevent infinite loops or long-unresponsive tasks.

📚 Project Status

Currently, the project is still in its early stages. I'm preparing relevant content, including server configuration, tool integration, and documentation writing. Everything is not ready yet, but stay tuned for the upcoming exciting updates!

💻 Stay Informed

Click the "Watch" button in the upper right corner to stay updated. After the basic work is completed, you're welcome to contribute code or provide suggestions.

⚠️ Important Note

The content of this article is a translated version for reference only. For more information, please visit the original project page.