How do I connect Zebbern Kali MCP Server to Claude?

The listing records `docker run -d -p 5000:5000 --name zebbern-kali zebbern-kali-mcp` as its setup step. Run it, then follow the repository's instructions for the client configuration; the listing names VS Code as compatible clients.

Is Zebbern Kali MCP Server free?

The listed licence is MIT. Check the upstream terms for permitted use and commercial requirements; a public repository does not by itself mean the software is free or open source. Connected APIs and hosted services may have separate charges.

What can Zebbern Kali MCP Server do?

Zebbern Kali MCP Server documents 40 tools to the agent, including amass, assetfinder, bloodyAD. The descriptions above come from project documentation. A live handshake does not test individual tool behavior.

Zebbern Kali MCP

Unclaimed

by zebbern

MCP server for Kali Linux penetration testing - 121 tools for AI-assisted security testing - Giving Agents access to full pentesting tools

Install

$docker run -d -p 5000:5000 --name zebbern-kali zebbern-kali-mcp

Set up this server

Compare servers My Stack

This server needs project-specific setup. Follow the project instructions; no reusable public launch command is available yet.

Project instructions

ai-agentsai-agents-mcpai-mcpai-sdkai-studioai-toolkitai-toolsautomated-pentestingautomated-testingkalikali-toolsmcpmcp-apimcp-clientmcp-gatewaymcp-kalimcp-servermcp-toolsmodel-context-protocol

Is this your MCP server?

This listing was auto-indexed from the public record. Claim it to edit the page, set compatibility and unlock growth tools. Takes under two minutes.

Claim this server

Security profile

Claimed and verified servers get a weekly static scan that shows what the code can reach: external services, environment variables, shell commands, agent configuration folders, plus any dependencies with known advisories. Claim this listing to get one. How the security profile works

40 of 40 tools

Documented tools (40)

From project documentation. A server handshake does not verify each tool’s description or behavior.

amass

Attack surface mapping

assetfinder

Subdomain discovery via various sources

bloodyAD

AD privilege escalation framework

certipy-ad

AD Certificate Services (ADCS) exploitation

coercer

Coerce Windows authentication

commix

Command injection exploitation

dalfox

XSS scanning and exploitation

dementor

SpoolService abuse for relay attacks

dirb

Web content scanner

evil-winrm

WinRM shell with upload/download

ffuf

Fast web fuzzer

fierce

DNS reconnaissance

ghauri

Advanced SQL injection detection

gMSADumper

Group Managed Service Account password dumper

gobuster

Directory/file/DNS brute-forcing

hashcat

GPU-accelerated hash cracking

httpx

HTTP probing and technology detection

hydra

Network login brute-forcer

john

John the Ripper password cracker

katana

Web crawler (v1.1.0 pre-built binary)

krbrelayx

Kerberos relay and delegation abuse

ldapdomaindump

LDAP domain information dumper

mapcidr

CIDR range manipulation

masscan

High-speed port scanner

massdns

High-performance DNS resolver

metasploit-framework

Full Metasploit Framework

netexec

Primary SMB/LDAP/WinRM tool (replaces crackmapexec)

nikto

Web server vulnerability scanner

nmap

Port scanning, service/version detection, NSE scripts

nuclei

Template-based vulnerability scanner

PetitPotam

NTLM relay coercion via EFS RPC

pywhisker

Shadow Credentials attack tool

responder

LLMNR/NBT-NS/MDNS poisoner

sqlmap

Automated SQL injection

sslscan

SSL/TLS configuration analysis

subfinder

Passive subdomain discovery

subzy

Subdomain takeover checking

waybackurls

Fetch URLs from the Wayback Machine

winrmexec

WinRM command execution

wpscan

WordPress vulnerability scanner

Tool change history

Compared across complete checks of the same configuration. Tools were listed, not invoked. Input-schema changes are not measured here.

No complete tool checks yet.

FAQ

Questions about Zebbern Kali MCP Server

How do I connect Zebbern Kali MCP Server to Claude?: The listing records `docker run -d -p 5000:5000 --name zebbern-kali zebbern-kali-mcp` as its setup step. Run it, then follow the repository's instructions for the client configuration; the listing names VS Code as compatible clients.
Is Zebbern Kali MCP Server free?: The listed licence is MIT. Check the upstream terms for permitted use and commercial requirements; a public repository does not by itself mean the software is free or open source. Connected APIs and hosted services may have separate charges.
What can Zebbern Kali MCP Server do?: Zebbern Kali MCP Server documents 40 tools to the agent, including amass, assetfinder, bloodyAD. The descriptions above come from project documentation. A live handshake does not test individual tool behavior.