High-risk tools in Kali MCP Server

High severity Kali MCP Server MCP Server 11 of 17 tools

11 of the 17 tools in Kali MCP Server are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

dirb_scan Execute

Brute force directories and files.
dnsenum_scan Execute

DNS enumeration tool.
dnsrecon_scan Execute

DNS enumeration and scanning.
enum4linux_scan Execute

Enumerate Windows/Samba systems.
gobuster_scan Execute

Fast directory/DNS/vhost bruteforce.
hydra_bruteforce Execute

Brute force login credentials.
masscan_scan Execute

Perform fast masscan port scan.
nikto_scan Execute

Run Nikto web server scanner.
nmap_scan Execute

Perform nmap network scan.
sqlmap_scan Execute

Test for SQL injection vulnerabilities.
wpscan_scan Execute

Scan WordPress site for vulnerabilities.

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Runaway Tool Loops
Prompt Injection via Tool Results

High-risk tools in Kali MCP Server

Tools at high risk

Attacks that target this class

More on Kali MCP Server

Enforce policy on every Kali MCP Server tool call.