High-risk tools in Kali

High severity Kali MCP Server 96 of 109 tools

96 of the 109 tools in Kali are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

aircrack_scan Execute

aircrack_scan
amass_scan Execute

Execute amass with the provided parameters.
apktool_decompile Execute

Execute Apktool APK decompiler.
arachni_scan Execute

Execute arachni with the provided parameters.
arjun_scan Execute

Execute arjun with the provided parameters.
autorecon_scan Execute

autorecon_scan
beef_exploit Execute

Execute BeEF browser exploitation framework.
cewl_generate Execute

cewl_generate
chkrootkit_scan Execute

Execute chkrootkit with the provided parameters.
clamav_scan Execute

Execute clamav with the provided parameters.
cloudsploit_scan Execute

cloudsploit_scan
cmsmap_scan Execute

Execute cmsmap with the provided parameters.
crawley_scan Execute

Execute Crawley web crawler.
crowbar_attack Execute

crowbar_attack
crunch_generate Execute

crunch_generate
dirb_scan Execute

Execute Dirb web content scanner.
dnsenum_scan Execute

Execute dnsenum with the provided parameters.
dnsrecon_scan Execute

Execute dnsrecon with the provided parameters.
droopescan_scan Execute

Execute droopescan with the provided parameters.
empire_exploit Execute

empire_exploit
enum4linux_scan Execute

Execute Enum4linux Windows/Samba enumeration tool.
execute_command Execute

Execute an arbitrary command on the Kali server.
feroxbuster_scan Execute

Execute feroxbuster with the provided parameters.
ffuf_scan Execute

ffuf_scan
fierce_scan Execute

Execute fierce with the provided parameters.
findomain_scan Execute

Execute findomain with the provided parameters.
firmwalker_scan Execute

firmwalker_scan
gau_scan Execute

Execute gau with the provided parameters.
gdb_analyze Execute

Execute GDB debugger.
ghidra_analyze Execute

Execute Ghidra reverse engineering framework.
gobuster_scan Execute

gobuster_scan
gophish_attack Execute

Execute GoPhish phishing framework.
gospider_scan Execute

Execute GoSpider web spider.
hakrawler_scan Execute

Execute Hakrawler web crawler.
hash_identifier_analyze Execute

Execute Hash-Identifier hash type analyzer.
hashcat_attack Execute

hashcat_attack
hydra_attack Execute

hydra_attack
iotseeker_scan Execute

Execute IoTSeeker IoT device scanner.
john_crack Execute

john_crack
johnny_attack Execute

Execute Johnny password cracker.
joomscan_scan Execute

Execute joomscan with the provided parameters.
js_scan_analyze Execute

Execute JS-Scan JavaScript analysis tool.
katana_scan Execute

Execute katana with the provided parameters.
lazyrecon_scan Execute

Execute LazyRecon reconnaissance framework.
lynis_scan Execute

Execute lynis with the provided parameters.
masscan_scan Execute

masscan_scan
medusa_attack Execute

medusa_attack
meg_scan Execute

Execute meg with the provided parameters.
metasploit_run Execute

Execute a Metasploit module.
mimikatz_attack Execute

Execute Mimikatz Windows credential extraction tool.
mobsf_analyze Execute

Execute MobSF mobile security framework.
naabu_scan Execute

Execute naabu with the provided parameters.
netcat_scan Execute

Execute Netcat network utility.
netdiscover_scan Execute

netdiscover_scan
netsparker_scan Execute

netsparker_scan
nikto_scan Execute

Execute Nikto web server scanner.
nmap_nse_scan Execute

Execute Nmap with NSE scripts.
nmap_scan Execute

nmap_scan
nuclei_scan Execute

Execute nuclei with the provided parameters.
ollydbg_analyze Execute

Execute OllyDbg debugger.
openvas_scan Execute

Execute OpenVAS vulnerability scanner.
pacu_attack Execute

Execute Pacu AWS exploitation framework.
paramspider_scan Execute

Execute paramspider with the provided parameters.
patator_attack Execute

patator_attack
photon_scan Execute

Execute Photon web crawler.
pipal_analyze Execute

pipal_analyze
powersploit_exploit Execute

powersploit_exploit
psexec_attack Execute

psexec_attack
reaver_attack Execute

reaver_attack
rkhunter_scan Execute

Execute rkhunter with the provided parameters.
rustscan_scan Execute

Execute rustscan with the provided parameters.
scout_suite_scan Execute

Execute Scout Suite cloud security scanner.
scrapy_crawl Execute

scrapy_crawl
secretfinder_scan Execute

Execute SecretFinder secret discovery tool.
set_attack Execute

Execute Social Engineer Toolkit.
skipfish_scan Execute

Execute skipfish with the provided parameters.
sn1per_scan Execute

Execute Sn1per penetration testing framework.
socat_connect Execute

socat_connect
sqlmap_scan Execute

Execute SQLmap SQL injection scanner.
subfinder_scan Execute

Execute subfinder with the provided parameters.
sublist3r_scan Execute

sublist3r_scan
traceroute_scan Execute

Execute Traceroute network diagnostic tool.
unicornscan_scan Execute

unicornscan_scan
vulmap_scan Execute

Execute vulmap with the provided parameters.
vulners_scan Execute

Execute Vulners vulnerability scanner.
wafw00f_scan Execute

Execute wafw00f with the provided parameters.
wapiti_scan Execute

Execute wapiti with the provided parameters.
wfuzz_scan Execute

wfuzz_scan
whatweb_scan Execute

Execute whatweb with the provided parameters.
wifiphisher_attack Execute

wifiphisher_attack
wifite_scan Execute

wifite_scan
winexe_attack Execute

winexe_attack
wireshark_capture Execute

wireshark_capture
wpscan_analyze Execute

Execute WPScan WordPress vulnerability scanner.
xsser_scan Execute

xsser_scan
zmap_scan Execute

Execute zmap with the provided parameters.

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Runaway Tool Loops
Prompt Injection via Tool Results

High-risk tools in Kali

Tools at high risk

Attacks that target this class

More on Kali

Enforce policy on every Kali tool call.