MCP-Kali-Server: connect Claude to Kali Linux tools

• Maps open ports and running services on a host

  Runs Nmap against a host or network on the Kali machine and reports which ports are open and what services answer on them.

  Try: “Scan 10.10.11.5 and list its open ports and service versions”

  Runs code · nmap_scan

• Lists a site's directories, subdomains or virtual hosts

  Runs Gobuster against a website to enumerate directories, DNS subdomains or virtual hosts from a wordlist.

  Try: “Enumerate directories on http://10.10.11.5”

  Runs code · gobuster_scan

• Lists pages and folders on a website

  Runs Dirb, a web content scanner that checks common paths on a site to list pages that are not linked.

  Try: “Run a dirb content scan on http://target.htb”

  Runs code · dirb_scan

• Checks a web server's configuration and software

  Runs Nikto against a web server to report outdated software, notable files and common misconfigurations.

  Try: “Run a Nikto check on http://10.10.11.5”

  Runs code · nikto_scan

• Reports a WordPress site's version, plugins and themes

  Runs WPScan against a WordPress site to list its version, plugins, themes and any issues recorded for them.

  Try: “Analyze the WordPress site at http://blog.target.htb”

  Runs code · wpscan_analyze

• Tests a web page for SQL injection

  Runs SQLmap against a URL, with optional form data, to test whether its database queries can be influenced by input.

  Try: “Test http://target.htb/item.php?id=1 with sqlmap”

  Runs code · sqlmap_scan

• Lists users, shares and details from a Windows or Samba host

  Runs enum4linux against a Windows or Samba host to list users, shared folders and system information.

  Try: “Enumerate the SMB shares on 10.10.11.20”

  Runs code · enum4linux_scan

• Tests login services against a list of credentials

  Runs Hydra against a login service to check a list of usernames and passwords, the way a security test audits weak credentials.

  Try: “Test SSH on 10.10.11.5 against my wordlist”

  Runs code · hydra_attack

• Recovers passwords from a captured hash file

  Runs John the Ripper over a file of password hashes to recover the plaintext, used to audit password strength.

  Try: “Run John the Ripper on the hashes in dump.txt”

  Runs code · john_crack

• Runs a Metasploit module with the options you set

  Runs a chosen Metasploit Framework module with the options you give it, for example to check a host against a known weakness.

  Try: “Run the smb_version auxiliary module against 10.10.11.20”

  Runs code · metasploit_run

• Runs any terminal command on the Kali machine

  Runs any shell command on the Kali machine and returns its output, so the assistant can use tools beyond the ones listed here.

  Try: “Run whoami and ip addr on the Kali box”

  Runs code · execute_command

• Used by the assistant behind the scenes

  Checks that the Kali API server is reachable

  Checks whether the Kali API server is up and which expected tools it has available.

  Try: “Is the Kali server connected?”

  Network · server_health

Watch out for

• It can run any command on your Kali box

  One tool passes any shell command to the Kali machine as the user running the server. Run it in a disposable VM and approve each command. github.com

• The Kali side has no password

  Anyone who can reach port 5000 can run commands. Keep the default localhost setting and connect over an SSH tunnel. github.com

• Scanned pages can steer the AI

  Text in web pages, DNS records or files can trick the model into running other commands. Do not set tools to always allow. github.com

• Only test systems you are allowed to

  The scanners and password crackers are attack tools. The project limits use to education and authorized testing. github.com

• Command injection in tool options was fixed

  Tool options were passed to a shell until March 2026. The fix is in the Kali package. github.com

Security advisories

In their words