# puffert/kali-mcp

Source: https://glimind.com/server/github%2Fpuffert%2Fkali-mcp
Registry id: `github/puffert/kali-mcp`
Status: unknown

## Tools (72)

- `add_credential`: Record a credential in session.
- `add_finding`: Record a vulnerability with severity.
- `add_host`: Manually add/update a host in session.
- `add_note`: Free-text note with category.
- `bloodhound_ingest`: BloodHound data collection via bloodhound-python.
- `bloodhound_query`: Run Cypher queries against Neo4j with presets.
- `bloody_ad`: AD privilege escalation via DACL/ACE manipulation.
- `burp_api`: Interact with Burp REST API for scans and sitemap.
- `cancel_job`: Cancel a running background job with SIGTERM.
- `certipy_scan`: ADCS enumeration and exploitation for vulnerable templates.
- `chisel`: TCP/UDP tunnel for SOCKS5 proxy and port forwards.
- `desktop_click`: Mouse clicks at coordinates with button support.
- `desktop_clipboard`: Get or set clipboard contents via xclip.
- `desktop_disconnect`: Close RDP/VNC sessions by job ID or window name.
- `desktop_focus`: Focus/activate a specific window by name or ID.
- `desktop_mouse_move`: Move cursor to specific coordinates.
- `desktop_screenshot`: Take screenshot and return as base64 image.
- `desktop_type`: Send keyboard input via xdotool.
- `desktop_unlock`: Unlock Kali desktop if screen is locked.
- `desktop_windows`: List all open windows with details.
- `dirb_scan`: Web content scanner with parsed output.
- `enum4linux_scan`: Windows/Samba enumeration extracting users and shares.
- `evil_winrm`: WinRM shell with pass-the-hash and PS script loading.
- `execute_command`: Run any shell command with structured output.
- `export_loot`: Export credentials to attack-ready files.
- `ffuf_scan`: Fast web fuzzer with structured JSON output.
- `generate_report`: Generate Markdown engagement report.
- `get_job`: Check status/results of a background job.
- `get_session`: Full session overview with hosts, creds, findings.
- `gobuster_scan`: Directory/DNS/vhost brute-forcing with parsed results.
- `hashcat_crack`: GPU-accelerated cracking with parsed output.
- `hydra_attack`: Online brute-forcing with parsed credentials.
- `impacket_tool`: Run any Impacket tool with auto-parsing of hashes.
- `john_crack`: Offline hash cracking with auto-added credentials.
- `kerbrute`: Kerberos user enumeration and password spraying.
- `launch_bloodhound_gui`: Start BloodHound GUI with Neo4j.
- `launch_burp`: Start Burp Suite GUI or headless.
- `launch_wireshark`: Start Wireshark GUI or tshark headless capture.
- `ligolo`: Ligolo-ng tunneling proxy with TUN interface.
- `list_jobs`: List all background jobs with status and runtime.
- `load_session`: Restore a saved session from file.
- `metasploit_run`: Run MSF modules via resource script with async support.
- `msfvenom_generate`: Generate payloads with any format and platform.
- `nikto_scan`: Web server vulnerability scanner with auto findings.
- `nmap_scan`: Port/service scan with parsed JSON output.
- `nxc_scan`: NetExec multi-protocol credential testing and dumping.
- `ping_sweep`: Quick host discovery via nmap -sn.
- `proxychains_run`: Run any command through a SOCKS proxy.
- `rdp_connect`: Connect to target via RDP with auto-detection.
- `responder`: LLMNR/NBT-NS/mDNS poisoner capturing NTLM hashes.
- `save_session`: Persist session to JSON file.
- `screenshot`: Capture desktop or specific window to file.
- `searchsploit`: Search Exploit-DB with structured JSON results.
- `set_engagement`: Initialize engagement with name, scope, and directory.
- `sliver_armory`: List, search, and install armory extensions.
- `sliver_command`: Generic escape hatch for any Sliver console command.
- `sliver_generate`: Generate Sliver implants for various OS and architectures.
- `sliver_kill`: Kill sessions, beacons, or jobs.
- `sliver_listener`: Start/stop/list Sliver listeners (mTLS, HTTP, etc.).
- `sliver_profiles`: Create, list, or generate from implant profiles.
- `sliver_server`: Manage sliver-server daemon and operators.
- `sliver_sessions`: List active sessions, beacons, or jobs with filtering.
- `sliver_stager`: Generate staged payloads with stage listener setup.
- `sliver_use`: Run commands on a session/beacon via RC script.
- `smb_share`: Host directory over SMB via impacket-smbserver.
- `socat_relay`: TCP/UDP port relay and forwarding.
- `sqlmap_scan`: SQL injection scanner with extracted injection points.
- `sshuttle`: VPN-over-SSH tunnel through compromised hosts.
- `start_listener`: ncat TCP listener as background job for reverse shells.
- `tshark_analyze`: Analyze pcap files for protocol stats and conversations.
- `vnc_connect`: Connect to target via VNC with password auth.
- `wpscan_analyze`: WordPress vulnerability scanner for version and plugins.

Measured by Glimind (https://glimind.com): MCP handshake + tool list only, no tool is ever called. CC BY 4.0.