渗透测试工具服务器

git clone https://github.com/JesseEikeland/kali-mcp.git
cd kali-mcp

docker-compose build

docker-compose up -d

docker-compose exec kali-mcp bash

python3 server.py

# Basic nmap scan
nmap_scan(target="192.168.1.1", scan_type="basic")

# Full port scan
nmap_scan(target="example.com", scan_type="full")

# Vulnerability scan
nmap_scan(target="192.168.1.1", scan_type="vuln")

# Fast masscan
masscan_scan(target="192.168.1.0/24", ports="1-1000", rate=1000)

# Nikto web scan
nikto_scan(target="http://example.com", ssl=False)

# WordPress scan
wpscan_scan(target="http://example.com", enumerate="vp,vt,u")

# Identify web technologies
whatweb_scan(target="http://example.com", aggression=1)

# Detect WAF
wafw00f_detect(target="http://example.com")

# Dirb scan
dirb_scan(target="http://example.com")

# Gobuster directory scan
gobuster_scan(target="http://example.com", mode="dir")

# Gobuster DNS enumeration
gobuster_scan(target="example.com", mode="dns")

# Basic SQLMap scan
sqlmap_scan(target="http://example.com/page?id=1")

# With POST data
sqlmap_scan(target="http://example.com/login", data="username=admin&password=test")

# With cookies
sqlmap_scan(target="http://example.com/page", cookie="PHPSESSID=abc123")

# Search for exploits
searchsploit_search(query="wordpress")

# Exact match search
searchsploit_search(query="Apache 2.4.49", exact=True)

# DNS reconnaissance
dnsrecon_scan(domain="example.com", scan_type="std")

# DNS enumeration
dnsenum_scan(domain="example.com")

# Test SSL configuration
sslscan_test(target="example.com:443")

# Brute force SSH
hydra_bruteforce(
    target="192.168.1.1",
    service="ssh",
    username="admin",
    wordlist="/usr/share/wordlists/rockyou.txt"
)

# Enumerate Windows/Samba
enum4linux_scan(target="192.168.1.1")

# List available wordlists
list_wordlists()

# Get legal disclaimer
get_disclaimer()

kali-mcp/
├── Dockerfile              # Kali Linux container with all tools
├── docker-compose.yml      # Container orchestration
├── server.py               # FastMCP server with tool wrappers
├── requirements.txt        # Python dependencies
├── README.md              # This file
├── SETUP.md               # Quick setup guide
├── LICENSE                # MIT License
├── .gitignore             # Git ignore rules
├── scans/                 # Scan results (created on first run)
└── wordlists/             # Custom wordlists (optional)

# Check logs
docker-compose logs kali-mcp

# Rebuild container
docker-compose down
docker-compose build --no-cache
docker-compose up -d

# Fix scan directory permissions
sudo chown -R $USER:$USER ./scans

# Update package lists
docker-compose exec kali-mcp apt-get update

# Install missing tool
docker-compose exec kali-mcp apt-get install -y <tool-name>

environment:
  - MAX_TIMEOUT=300        # Maximum command timeout (seconds)
  - SCAN_RESULTS_DIR=/home/pentester/scans

mkdir -p wordlists
cp /path/to/custom.txt wordlists/