whois_lookupLABSCO SUMMARY
An assistant that can run the scan it is describing, not just name it.
The value is the loop rather than the toolbox: the model picks the nmap flags, reads the structured output that comes back, and decides whether the next step is a directory fuzz or an exploit search — instead of telling you which command to type. The container is what makes that workable on a laptop that is not running Kali, and it is also the boundary worth holding in mind, because every one of these tools acts on whatever target gets named.
What it is
A server that wraps the usual Kali Linux command line — whois, dnsenum, amass, whatweb, netdiscover, nmap, enum4linux, nikto, gobuster, dirb, ffuf, wfuzz, sqlmap, wpscan, hydra, john, hashcat, searchsploit, tcpdump and the Metasploit console — as tools with named parameters, returning each run's standard output and error to the model. The published image is built on kalilinux/kali-rolling with the toolchain installed and the rockyou wordlist already unpacked, so it behaves the same on Windows and macOS as on Linux with none of those binaries installed locally. Run directly on a host instead and it expects them on the PATH; packet capture needs elevated privileges either way. Long-running tools have their own timeouts, so an unresponsive target returns an error rather than hanging the conversation.
What you get
- Reconnaissance: whois records, DNS enumeration, passive subdomain discovery, web technology and header fingerprinting, and live hosts on a range
- Port and service scanning with the nmap flags you pass through, plus Windows and Samba enumeration and SMB share listing
- Web testing: vulnerability scanning, directory and content brute forcing, parameter fuzzing, SQL injection detection, and WordPress enumeration
- Password work: login brute forcing against a named service, and hash cracking with either john or hashcat against a wordlist you supply
- Exploit-DB search, packet capture on an interface, and a Metasploit module run with its options passed as key-value pairs
Setup effort
One command — docker pull cyberillo/kali-mcp-server:latest
USE CASES
01
Mapping an unfamiliar host before touching it
Registration records, DNS enumeration and passive subdomain discovery first, then a port and service scan with the flags you pass through.
02
Finding what a web application exposes
Fingerprint the stack and headers, brute force directories and content, and run a vulnerability scan over what turns up.
03
Testing how a site handles the input you give it
Probe parameters for injection and, on WordPress, enumerate the plugins and versions that carry the known issues.
04
Recovering a hash you are authorised to recover
Crack it against a wordlist with either cracker, depending on whether the machine has the hardware for the heavier one.
05
Checking whether a version you found has a known exploit
Search the exploit database for the product and version, then run the matching module with its options passed as key-value pairs.
06
Looking at what is actually on the wire
Find live hosts on the range, then capture a bounded number of packets on the interface instead of watching indefinitely.
07
Enumerating a Windows or Samba host
Run the Windows enumeration pass and list the SMB shares the credentials you have can reach.
21 tools
Listed in project docs. Your client may show a different list.
dnsenum_scanwhatweb_scanamass_enumnetdiscover_scannmap_scanenum4linux_scansmbclient_listnikto_scangobuster_dirdirb_scanffuf_scanwfuzz_scansqlmap_scanwpscan_enumhydra_bruteforcejohn_crackhashcat_cracksearchsploit_querytcpdump_sniffmetasploit_exploitBEFORE YOU INSTALL
What to know first
Tools you get
21 tools named in the project's documentation.
Requires
docker on PATH
INSTALLATION
Connect your client
Server setup
TERMINAL
docker pull cyberillo/kali-mcp-server:latestMCP Clients
Claude Desktop
CLAUDE DESKTOP · JSON
{
"mcpServers": {
"kali-tools": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"cyberillo/kali-mcp-server:latest"
]
}
}
}VS Code
VS CODE · JSON
{
"servers": {
"kali-mcp-server": {
"type": "stdio",
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"cyberillo/kali-mcp-server:latest"
]
}
},
"inputs": []
}Any MCP client
ANY MCP CLIENT · TERMINAL
docker run -i --rm cyberillo/kali-mcp-server:latest
