Summary
A Kali box an agent can drive, with the whole assessment lifecycle exposed as tools.
Instead of one wrapper per binary, it maps the actual stages of an engagement — recon, enumeration, scanning, credential testing, payload generation — onto tools an assistant can chain, with the tooling isolated in a container rather than installed on your machine.
What it is
A Kali Linux container that speaks MCP. The security tools run inside the container and the results come back to your client, over SSE or stdio.
What you get
- Reconnaissance: port scanning with nmap presets, DNS and subdomain enumeration, network discovery, and an automated recon pass that chains them
- Web assessment: site spidering, form and header analysis, TLS inspection, web enumeration, and a combined web audit
- Vulnerability work: a vulnerability scan, plus exploit search against the software it identifies
- Credential testing with hydra, and a credential store so the same set is not re-entered on every call
- Payload and reverse-shell generation for the target you name
Requirements
Docker — build the image or run it with docker compose. The container listens on port 8000; your client connects over SSE at http://localhost:8000/sse, or over stdio. Everything executes inside the container, so what it can reach is what that container can reach.
Setup effort
One command — docker compose up -d