1. Conduid
  2. Blockchain
  3. Kali Pentest MCP Server
MCP server · Blockchain

Kali Pentest MCP Server

by · github.com/SalmanFaris7/kali-pentest-mcp-server

Custom MCP server implementation integrating Kali Linux security tools with Claude Desktop. Built with Docker containerization, Python/FastMCP, manual MCP protocol handling, Linux capabilities for secure execution, and environment-based whitelisting for ethical penetration testing.

Unclaimed last commit a year ago blockchain
InstallView source
34Low

Scored 7 months ago · breakdown

About Kali Pentest MCP Server

Kali Pentest MCP Server is an MCP server published by SalmanFaris7 in the Blockchain category: custom MCP server implementation integrating Kali Linux security tools with Claude Desktop. Built with Docker containerization, Python/FastMCP, manual MCP protocol handling, Linux capabilities for secure execution, and environment-based whitelisting for ethical penetration testing.

The repository has 1 stars and 1 forks, with the last commit a year ago. Six months or more without a commit doesn't mean the server is broken, but check the open issues before depending on it in production.

Install

From source
git clone https://github.com/SalmanFaris7/kali-pentest-mcp-server

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Kali Pentest MCP Server

Powered by Claude · Grounded in docs

I know everything about Kali Pentest MCP Server. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

  • ✓README presentThe repository ships documentation.

5 checks have not been run yet.

README

# Kali Pentest MCP Server

A Model Context Protocol (MCP) server that provides secure access to web penetration testing tools from Kali Linux for educational purposes.

Purpose

This MCP server provides a secure interface for AI assistants to perform basic penetration testing and vulnerability scanning on whitelisted targets in a controlled Docker environment.

⚠️ IMPORTANT LEGAL NOTICE

This server is for EDUCATIONAL PURPOSES ONLY. You must:

  • Only test systems you own or have explicit written permission to test
  • Comply with all applicable laws and regulations
  • Never use these tools for unauthorized access or malicious purposes
  • Understand that unauthorized penetration testing is illegal

Features

Current Implementation

  • nmap_scan - Perform network port scanning with configurable scan types
  • nikto_scan - Run web vulnerability scanner to identify common issues
  • dirb_scan - Enumerate directories and files on web servers
  • wpscan_check - Scan WordPress sites for vulnerabilities
  • sqlmap_test - Test for SQL injection vulnerabilities
  • searchsploit - Search the Exploit Database for known exploits
  • check_target_whitelist - Display currently allowed testing targets
  • quick_recon - Run combined reconnaissance using multiple tools

Prerequisites

  • Docker Desktop with MCP Toolkit enabled
  • Docker MCP CLI plugin (docker mcp command)
  • Targets you own or have permission to test

Installation

See the step-by-step instructions provided with the files.

Usage Examples

In Claude Desktop, you can ask:

  • "Scan localhost port 80 with nmap"
  • "Check my local WordPress site at localhost:8080 for vulnerabilities"
  • "Search for Apache exploits in the database"
  • "Run a quick recon on my test server at 127.0.0.1"
  • "Show me the whitelisted targets"
  • "Test localhost/login.php for SQL injection"
  • "Enumerate directories on my local web server"
  • "Run nikto scan on my test application"

Architecture

README copy captured when this server was indexed; it may lag the repository. The original is authoritative.

Questions

About Kali Pentest MCP Server

How do I install Kali Pentest MCP Server?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Kali Pentest MCP Server safe to use with an AI agent?

Its trust score is 34 out of 100 (low). It passes 1 of the 1 static security checks run so far. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Kali Pentest MCP Server still maintained?

The last commit was a year ago. That's long enough that you should check whether the maintainer is responding to issues before depending on it.