Kali Security Tools

by ccq1

99 stars
375 downloads
Not rated
GitHub

About

Provides a secure, sandboxed environment for executing Kali Linux security tools including nmap, objdump, and wireshark for vulnerability scanning, binary analysis, and network inspection tasks.

Details

Author
ccq1
Repository
ccq1/awsome_kali_MCPServers
GitHub stars
99
Downloads
375
License
Apache License 2.0
Categories
Productivity, Developer Tools, Design, File Management, AI, Security, Frontend, Infrastructure, Project Management, Other

- Network scanning with Nmap (basic, intense, stealth, quick, vulnerability)
- Symbol analysis with nm (basic, dynamic, demangle, numeric/size sort)
- Binary analysis with objdump (file headers, disassemble, symbol/section tables)
- String extraction with strings (basic, min length, offsets, encoding)
- Network traffic analysis with tshark (capture, analyze pcap, HTTP extraction)
- Sandboxed command execution via Docker (configurable memory, CPU, network, timeout)

Setting up with Highlight

This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:

  1. Download and install Highlight from highlightai.com/download
  2. Navigate to the plugins tab and select "Add Custom Plugin"
  3. Configure the plugin with the settings below
    Plugin Name Kali Security Tools
    Command (node, npx, python, etc.) docker
    Arguments
    • Argument 1 run
    • Argument 2 -i
    • Argument 3 kali-mcps:latest

    Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.

  4. Enable "Start Automatically" if you want the plugin to start when Highlight launches

From the repository

Follow these steps to quickly get started with kali-mcps:
1. Build the Docker Image
First, build the Docker image, temporarily named kali-mcps. Run the following command in the project root directory:

docker build -t kali-mcps:latest .

2. Launch an MCP Client
Ensure you have an MCP client installed, such as claude desktop, cline, goose, or roo code. Open your chosen MCP client.
3. Configure the MCP Client
In your MCP client, create a configuration file (e.g., config.json) with the following content:
{
"mcpServers": {
"kali-docker": {
"command": "docker",
"args": ["run", "-i", "kali-mcps:latest"]
}
}
}

- "kali-docker" is the server name, which you can customize.
- "command": "docker" specifies that Docker will be used to run the container.
- "args" defines the Docker run parameters: -i enables interactive mode, and kali-mcps:latest is the image you just built.

4. Use Kali Tools
Once configured, connect to the kali-mcps container via the MCP client and start using the built-in Kali tools (e.g., Nmap, nm, objdump, strings, tshark) for your tasks. Examples include:
- Run basic_scan for basic network scanning.
- Run disassemble to disassemble a target file.
- Run capture_live to capture real-time network traffic.

<p align="center">
image
</p>

basic_scan

Performs a basic network scan.

intense_scan

Conducts an in-depth network scan.

stealth_scan

Executes a stealth network scan.

quick_scan

Carries out a quick network scan.

vulnerability_scan

Scans for vulnerabilities in the network.

basic_symbols

Lists basic symbols from binaries.

dynamic_symbols

Lists dynamic symbols from binaries.

demangle_symbols

Decodes mangled symbols.

numeric_sort

Sorts symbols numerically.

size_sort

Sorts symbols by size.

undefined_symbols

Lists undefined symbols from binaries.

file_headers

Lists headers of a binary file.

disassemble

Disassembles the target binary file.

symbol_table

Lists the symbol table from a binary.

section_headers

Lists section headers of a binary file.

full_contents

Lists the full contents of a binary file.

basic_strings

Performs basic string extraction from files.

min_length_strings

Extracts strings with a specified minimum length.

offset_strings

Extracts strings along with their offsets.

encoding_strings

Extracts strings based on specific encoding.

capture_live

Captures network traffic in real-time.

analyze_pcap

Analyzes pcap files for network traffic.

extract_http

Extracts HTTP data from captured traffic.

protocol_hierarchy

Lists the hierarchy of network protocols.

conversation_statistics

Provides statistics on network conversations.

expert_info

Analyzes expert information from network captures.

Claude Desktop / Cursor

Paste into your MCP client config file to install this server.

{
    "mcpServers": {
        "kali security tools": {
            "cwd": "string",
            "env": {},
            "args": [
                "run",
                "-i",
                "kali-mcps:latest"
            ],
            "shell": false,
            "command": "docker"
        }
    }
}

Linux

{
    "cwd": "string",
    "env": [],
    "args": [
        "run",
        "-i",
        "kali-mcps:latest"
    ],
    "shell": false,
    "command": "docker"
}

Macos

{
    "cwd": "string",
    "env": [],
    "args": [
        "run",
        "-i",
        "kali-mcps:latest"
    ],
    "shell": false,
    "command": "docker"
}

Windows

{
    "cwd": "string",
    "env": [],
    "args": [
        "run",
        "-i",
        "kali-mcps:latest"
    ],
    "shell": false,
    "command": "docker"
}

awsome-kali-MCPServers

Overview

Welcome to awsome-kali-MCPServers! This repository is a collection of Model Context Protocol (MCP) servers designed specifically for Kali Linux environments. The goal is to enhance reverse engineering, security testing, and automation workflows by integrating powerful tools and flexible features. Whether you're a security researcher or a developer, this project aims to streamline your tasks with Kali Linux.

Quick Start

Follow these steps to quickly get started with kali-mcps: 1. Build the Docker Image First, build the Docker image, temporarily named kali-mcps. Run the following command in the project root directory:
docker build -t kali-mcps:latest .
2. Launch an MCP Client Ensure you have an MCP client installed, such as claude desktop, cline, goose, or roo code. Open your chosen MCP client. 3. Configure the MCP Client In your MCP client, create a configuration file (e.g., config.json) with the following content:
{
  "mcpServers": {
    "kali-docker": {
      "command": "docker",
      "args": ["run", "-i", "kali-mcps:latest"]
    }
  }
}
- "kali-docker" is the server name, which you can customize. - "command": "docker" specifies that Docker will be used to run the container. - "args" defines the Docker run parameters: -i enables interactive mode, and kali-mcps:latest is the image you just built.

4. Use Kali Tools
Once configured, connect to the kali-mcps container via the MCP client and start using the built-in Kali tools (e.g., Nmap, nm, objdump, strings, tshark) for your tasks. Examples include:
- Run basic_scan for basic network scanning.
- Run disassemble to disassemble a target file.
- Run capture_live to capture real-time network traffic.

<p align="center">
image
</p>

What to Expect

Network Analysis: Tools for sniffing and analyzing traffic. Binary Understanding: Support for reverse engineering and function analysis.
No reviews yet — be the first

Sign in to leave a review

Use Google, GitHub, or an email account so ratings stay tied to real people.

Email sign in

No reviews posted yet.