Awsome Kali Mcpservers

🚀 awesome-kali-MCPServers

This is a collection of Model Context Protocol (MCP) servers designed specifically for the Kali Linux environment. It aims to enhance reverse engineering, security testing, and automated workflows by integrating powerful tools and flexible features. Whether you're a security researcher or a developer, this project simplifies your tasks on Kali Linux.

🚀 Quick Start

Follow these steps to quickly start using kali-mcps:

1. Build the Docker Image Run the following command in the project root directory to build a temporary Docker image named kali-mcps:

docker build -t kali-mcps:latest .

2. Start the MCP Client Ensure that an MCP client, such as claude desktop, cline, goose, or roo code, is installed. Open your chosen MCP client.
3. Configure the MCP Client Create a configuration file (e.g., config.json) in your MCP client with the following content:

{
  "mcpServers": {
    "kali-docker": {
      "command": "docker",
      "args": ["run", "-i", "kali-mcps:latest"]
    }
  }
}

• "kali-docker" is the server name, which you can customize.
• "command": "docker" specifies that Docker will be used to run the container.
• "args" defines the Docker run parameters: -i enables interactive mode, and kali-mcps:latest is the image you just built.

4. Use Kali Tools After configuration, connect to the kali-mcps container through the MCP client and start using the built - in Kali tools (such as Nmap, nm, objdump, strings, tshark) for your tasks. For example:

• Run basic_scan for basic network scanning.
• Run disassemble to disassemble the target file.
• Run capture_live to capture real - time network traffic.

✨ Features

What to Expect

• Network Analysis: Tools for sniffing and analyzing traffic.
• Binary Understanding: Support for reverse engineering and function analysis.
• Automation: Scripts and services to simplify repetitive tasks.

New Features

Since the last update, we've added the following features, integrating a series of tools based on the FastMCP framework:

1. Network Scanning (Nmap)

• basic_scan: Basic network scan.
• intense_scan: Intense network scan.
• stealth_scan: Stealth network scan.
• quick_scan: Quick network scan.
• vulnerability_scan: Vulnerability scan.

2. Symbol Analysis (nm)

• basic_symbols: List basic symbols.
• dynamic_symbols: List dynamic symbols.
• demangle_symbols: Demangle symbols.
• numeric_sort: Sort symbols numerically.
• size_sort: Sort symbols by size.
• undefined_symbols: List undefined symbols.

3. Binary Analysis (objdump)

• file_headers: List file headers.
• disassemble: Disassemble the target file.
• symbol_table: List the symbol table.
• section_headers: List section headers.
• full_contents: List the full contents.

4. String Extraction (strings)

• basic_strings: Basic string extraction.
• min_length_strings: Extract strings by specified minimum length.
• offset_strings: Extract strings by offset.
• encoding_strings: Extract strings by encoding.

5. Network Traffic Analysis (Wireshark/tshark)

• capture_live: Capture real - time network traffic.
• analyze_pcap: Analyze pcap files.
• extract_http: Extract HTTP data.
• protocol_hierarchy: Display the protocol hierarchy.
• display_filter: Apply a display filter.

6. Other Features

• start: Start the service.
• stop: Stop the service.
• status: Check the service status.

🔧 Technical Details

The project is still in its early stages. I'm currently preparing related content, including server configuration, tool integration, and documentation. It's not fully ready yet, but stay tuned for upcoming updates!

💡 Usage Tip

Feel free to watch or star this repository for updates on new features and file additions. Once the basic work is done, contributions and suggestions are welcome.