Kali Linux Penetration Testing Tools

🚀 Kali MCP Server

Kali MCP Server is a lightweight API transit bridging tool that connects MCP clients (e.g., Claude Desktop, 5ire) to API servers, enabling command execution on Linux terminals.

This tool can perform the following functions: run terminal commands (such as nmap, nxc, or other tools), interact with web applications using tools (such as curl, wget, gobuster), conduct AI-assisted penetration testing, solve CTF Web challenges in real-time, and assist in resolving target machines from HTB or THM.

📝 My Medium Article Introducing This Tool

👉 How MCP is Revolutionizing Offensive Security

🚀 Quick Start

The goal is to achieve AI-driven penetration testing in the following ways:

• Allow MCP to interact with AI endpoints (such as OpenAI, Claude, DeepSeek, or other models).
• Expose a controlled API for executing terminal commands on a Kali Linux machine.
• Use AI prompts and run terminal commands to solve CTF challenges or automate reconnaissance/penetration tasks.
• Allow MCP applications to interact with servers by sending custom requests (such as curl, nmap, ffuf, etc.) and receive structured outputs.

Here is an example I used in testing (I used Google's AI gemini 2.0 flash):

Attempt to Solve the Web CTF Challenge in RamadanCTF

https://github.com/user-attachments/assets/dc93b71d-9a4a-4ad5-8079-2c26c04e5397

Attempt to Solve the Machine "code" on HTB

https://github.com/user-attachments/assets/3ec06ff8-0bdf-4ad5-be71-2ec490b7ee27

✨ Features

• 🧠 AI Endpoint Integration: Connect your Kali to any MCP, such as claude desktop or 5ier.
• 🖥️ Command Execution API: Expose a controlled API to execute terminal commands on your Kali Linux machine.
• 🕸️ Web Challenge Support: AI can interact with websites and APIs to capture flags through curl and other tools.
• 🔐 Designed for Offensive Security Professionals: Suitable for red team members, vulnerability bounty hunters, or CTF players to automate common tasks.

📦 Installation

MCP Kali Server (Server Side)

# Download the MCP Kali Server script
$ git clone https://github.com/your-repository.git
$ cd mcp-kali-server
$ python3 server.py

MCP Kali Client (e.g., for Claude Desktop)

import requests

def execute_command(command):
    url = "http://<kali-server-ip>:8000/execute"
    data = {"command": command}
    response = requests.post(url, json=data)
    return response.json()

# Example: Execute a command and get the result
result = execute_command("nmap -sP 192.168.1.0/24")
print(result)

📚 Documentation

Other Possibilities

In addition to the above features, the MCP Kali Server can also be extended for the following scenarios:

• AI-Driven Vulnerability Scanning: Identify and classify security vulnerabilities by combining AI models with automation tools (such as nmap, masscan).
• Penetration Testing Workflow Automation: Integrate MCP with CI/CD pipelines to achieve a fully automated process from reconnaissance to exploitation.
• Real-Time Threat Analysis: Perform real-time anomaly detection by monitoring network traffic and combining it with AI models.

Usage Examples

Example 1: Initiate a Penetration Testing Task Using Claude Desktop

# Run the MCP Kali Server on the Kali server
$ python3 server.py

# Run the following command on the client (e.g., Claude Desktop):
$ mcp execute_command "nmap -sP 192.168.1.0/24"

Example 2: Conduct Web Application Security Testing Using 5ire

# Configure the MCP Kali Server to listen on port 8000
$ python3 server.py --port 8000

# Run the following command on the 5ire client:
$ mcp send_request "https://example.com"

⚠️ Important Note

• Ensure the security settings of the MCP Kali Server to avoid unauthorized access.
• Comply with all applicable laws, regulations, and ethical guidelines, and use this tool only within the scope of authorization.