Featured

Deploy OpenClaw in 60 seconds — 20% off logoDeploy OpenClaw in 60 seconds — 20% off

Launch OpenClaw on Hostinger in about 60 seconds and keep your agent live 24/7. Our referral link gives you 20% off, no coupon code needed.

Launch on Hostinger
Run your Hermes agent on Hostinger, fully managed logoRun your Hermes agent on Hostinger, fully managed

Launch Hermes on Hostinger in one click, fully managed, no VPS knowledge needed. Use code ZACAARON10 for 10% off.

Launch on Hostinger
Crawl and scrape any site into clean data, 10% off logoCrawl and scrape any site into clean data, 10% off

Firecrawl crawls and scrapes any site into clean markdown for your agent. Get 1,000 free credits, and new users get 10% off their first purchase.

Try Firecrawl free
6,000+ web scrapers for your AI agent, start free logo6,000+ web scrapers for your AI agent, start free

Apify gives your agent live web data: 6,000+ prebuilt scrapers and actors, MCP-ready. Sign up free with $5 in usage credits.

Try Apify free
One API to scrape, enrich, and extract the internet. logoOne API to scrape, enrich, and extract the internet.

Context.dev gives your agents a single API to scrape, enrich, and extract live web data — no proxies, no parsers, no maintenance.

Start building free
SetupClaw: done-for-you OpenClaw for founders & exec teams logoSetupClaw: done-for-you OpenClaw for founders & exec teams

White-glove OpenClaw for founders and exec teams (4–50+ employees): we install, harden, integrate your tools, and maintain it — secured from day one.

Get it set up for you
SEO data APIs for your agent, $1 free credit logoSEO data APIs for your agent, $1 free credit

DataForSEO gives your agent live access to SERP results, keyword data, backlinks, and on-page SEO data through one API. New accounts get a $1 credit, good for up to 20,000 keyword or backlink lookups.

Try DataForSEO free
Reach 48,000+ AI builders

A flat monthly placement in front of developers actively installing AI tools. No lock-in, cancel anytime.

Advertise here

Works with

Claude CodeClaude DesktopCursorVS CodeClineCodex CLIOpenClaw+ any MCP client

Install to Claude Code

This server doesn't publish a one-line install command. Follow the setup in the source repository.

Summary

A Dockerized Kali Linux MCP server that enables LLMs to perform network security scans, penetration testing, and reconnaissance using tools like Nmap, Nikto, Hydra, and SQLMap.

README.md

kali-mcp-server

A Kali Linux MCP (Model Context Protocol) Server built with Node.js for seamless integration with LLMs such as Claude, or any MCP-compatible client. It offers powerful network security and penetration testing tools like Nmap, Whois, Dig, Ping, Nikto, Hydra, and SQLMap inside a Dockerized Kali Linux setup.

---

DISCLAIMER — IMPORTANT LEGAL NOTICE: This repository and the tools, code, scripts, configurations, documentation, and other materials contained herein (collectively, the “Materials”) are provided solely for lawful, educational, and authorized security-testing purposes. The author(s) and maintainers make no representations or warranties regarding the suitability, accuracy, completeness, or fitness of the Materials for any particular purpose.

---

🧠 Features

  • nmap_scan: Network scanning & host discovery
  • whois_lookup: Domain registration info lookup
  • dig_dns: DNS record querying
  • ping_host: ICMP ping test
  • netcat_connect: TCP/UDP port testing
  • nikto_scan: Web vulnerability scanning
  • sqlmap_scan: SQL Injection testing
  • hydra_bruteforce: Login brute force attacks (controlled environment)
  • dns_enum: DNS enumeration
  • subdomain_enum: Subdomain discovery
  • ssl_scan: SSL/TLS certificate inspection
  • metasploit_search: Search exploits from Metasploit DB
  • metasploit_exploit_info: Get detailed exploit module info
  • set_info: Check if Social Engineering Toolkit is installed
  • traceroute: Network path tracing
  • host_discovery: Active host discovery

---

📁 Project Structure

kali-mcp-server/
├── Dockerfile
├── server.js
├── package.json
├── claude-config.json
├── .dockerignore
├── FEATURES.md
├── README.md
├── DISCLAIMER.md
├── LICENSE
└── screenshots/
    ├── scan_report.png
    ├── ssh_bruteforce.png
    ├── tools_list_1.png
    ├── tools_list_2.png
    └── tools_menu.png

--- ---

🚀 Quick Start

# Prequisitives

node server.js
Docker

1. Clone and Build Docker Image

git clone https://github.com/rangta10/kali-mcp-server.git
cd kali-mcp-server
docker build -t kali-mcp-server .

2. Run the Server

docker run -it kali-mcp-server

3. Config Claude AI

*Install Claude Desktop

*Turn on Claude Dveloper from settings

*Navigate To

C:\Users\<YourUsername>\AppData\Roaming\Claude

Edit this File

claude_desktop_config.json

Claude_desktop_config.json

{
  "mcpServers": {
    "filesystem": {
      "command": "npx",
      "args": [
        "-y",
        "@modelcontextprotocol/server-filesystem",
        "C:\\Users\\annan\\Desktop",
        "C:\\Users\\annan\\Downloads"
      ]
    },
    "kali-mcp-server": {
      "command": "docker",
      "args": [
        "run",
        "--rm",
        "-i",
        "--privileged",
        "--cap-add=NET_ADMIN",
        "--cap-add=NET_RAW",
        "kali-mcp-server:latest",
        "node",
        "/app/server.js"
      ]
    }
  }
}

---

🐳 Dockerfile

# kali-mcp-server (by rangta)
FROM kalilinux/kali-rolling

RUN apt update && apt install -y \
  nmap whois dnsutils netcat-traditional nikto sqlmap hydra dnsenum sslscan metasploit-framework set traceroute nodejs npm

WORKDIR /app
COPY . .
RUN npm install || true

CMD ["node", "server.js"]

---

⚙️ server.js

(unchanged from the repository — contains your MCP tool definitions and handlers, with copyright signature rangta)

---

📜 LICENSE

 License

Copyright (c) 2025 rangta

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND.

📸 Screenshots

!nmap scan nmap scan

---

See related servers & alternatives →

Related MCP servers

Browse all →

Related guides

Hand-picked reading to help you choose and use Cloud & DevOps servers.