MCPVault

sqlmap

MCP tool from Zebbern Kali MCP by zebbern

Automated SQL injection

How to use it

sqlmap is exposed by the Zebbern Kali MCP MCP server. Add the server to your MCP client (Claude Desktop, Cursor, Windsurf and others), and the sqlmap tool becomes available to the model automatically. See the full listing for setup details and every tool this server provides.

Install Zebbern Kali MCP

$docker run -d -p 5000:5000 --name zebbern-kali zebbern-kali-mcp
FULL ZEBBERN KALI MCP LISTING

Other tools in Zebbern Kali MCP (39)

amass

Attack surface mapping

assetfinder

Subdomain discovery via various sources

bloodyAD

AD privilege escalation framework

certipy-ad

AD Certificate Services (ADCS) exploitation

coercer

Coerce Windows authentication

commix

Command injection exploitation

dalfox

XSS scanning and exploitation

dementor

SpoolService abuse for relay attacks

dirb

Web content scanner

evil-winrm

WinRM shell with upload/download

ffuf

Fast web fuzzer

fierce

DNS reconnaissance

ghauri

Advanced SQL injection detection

gMSADumper

Group Managed Service Account password dumper

gobuster

Directory/file/DNS brute-forcing

hashcat

GPU-accelerated hash cracking

httpx

HTTP probing and technology detection

hydra

Network login brute-forcer

john

John the Ripper password cracker

katana

Web crawler (v1.1.0 pre-built binary)

krbrelayx

Kerberos relay and delegation abuse

ldapdomaindump

LDAP domain information dumper

mapcidr

CIDR range manipulation

masscan

High-speed port scanner

massdns

High-performance DNS resolver

metasploit-framework

Full Metasploit Framework

netexec

Primary SMB/LDAP/WinRM tool (replaces crackmapexec)

nikto

Web server vulnerability scanner

nmap

Port scanning, service/version detection, NSE scripts

nuclei

Template-based vulnerability scanner

PetitPotam

NTLM relay coercion via EFS RPC

pywhisker

Shadow Credentials attack tool

responder

LLMNR/NBT-NS/MDNS poisoner

sslscan

SSL/TLS configuration analysis

subfinder

Passive subdomain discovery

subzy

Subdomain takeover checking

waybackurls

Fetch URLs from the Wayback Machine

winrmexec

WinRM command execution

wpscan

WordPress vulnerability scanner