High-risk tools in MCP Kali Pentest

High severity MCP Kali Pentest MCP Server 39 of 61 tools

39 of the 61 tools in MCP Kali Pentest are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

aircrack_suite Execute

Complete aircrack-ng workflow for WPA/WEP cracking.
bettercap Execute

Swiss Army knife for WiFi, Bluetooth, and Ethernet networks reconnaissance and attacks.
binwalk_extract Execute

Firmware analysis tool for extracting embedded files and code.
bloodhound_ingest Execute

Active Directory attack path analysis. Identifies privilege escalation paths.
burpsuite_scan Execute

Burp Suite Professional automated scanner. Requires Burp Suite Pro license and REST API.
cloudfox_enum Execute

AWS enumeration and privilege escalation tool.
commix Execute

Automated command injection exploitation tool.
crackmapexec Execute

Post-exploitation tool for Active Directory environments. Supports SMB, MSSQL, SSH, WinRM.
dirbuster Execute

Multi-threaded Java application designed to brute force directories and files.
droopescan Execute

Drupal and SilverStripe security scanner.
drozer_scan Execute

Android security assessment framework for app testing.
ffuf_fuzz Execute

Fast web fuzzer for discovering paths, parameters, and vulnerabilities.
frida_trace Execute

Dynamic instrumentation toolkit for reverse engineering mobile apps.
gobuster_scan Execute

Directory and file brute-forcing tool. Discovers hidden paths and files on web servers.
graphql_scanner Execute

GraphQL security scanner checking for introspection, injection, and misconfiguration.
hashcat_crack Execute

Advanced password recovery using GPU acceleration.
hydra_bruteforce Execute

Network login brute-force tool. Supports SSH, FTP, HTTP, RDP, and many other protocols.
john_crack Execute

John the Ripper password cracker. Cracks password hashes using wordlists and rules.
joomscan Execute

Joomla vulnerability scanner detecting version, modules, and security issues.
kismet_scan Execute

Wireless network and device detector, sniffer, and intrusion detection system.
linpeas Execute

Linux privilege escalation awesome script. Automated enumeration.
masscan_scan Execute

Ultra-fast port scanner capable of scanning the entire Internet in minutes. Much faster than Nmap for large-scale scans.
mobsf_scan Execute

Mobile Security Framework - Android/iOS app security scanner.
nikto_scan Execute

Web server vulnerability scanner. Checks for outdated software, dangerous files, and misconfigurations.
nmap_scan Execute

Advanced port scanning and service detection using Nmap. Supports TCP/UDP, OS detection, script scanning, and version detection.
nuclei_scan Execute

Fast vulnerability scanner using templates. Detects CVEs, misconfigurations, and security issues.
owasp_zap_scan Execute

OWASP ZAP automated security scanner. Performs active and passive scanning of web applications.
postman_scan Execute

API testing with Postman/Newman. Run collections for API security testing.
radare2_analyze Execute

Open-source reverse engineering framework and disassembler.
reaver Execute

WPS (Wi-Fi Protected Setup) brute-force attack tool.
sqlmap_scan Execute

Automated SQL injection detection and exploitation. Tests for SQLi vulnerabilities and can extract database contents.
ssrf_detector Execute

Server-Side Request Forgery (SSRF) vulnerability detection.
start_autonomous_pentest Execute

Start a fully autonomous penetration test. The AI will make decisions and suggest next steps automatically.
vulnerability_assessment Execute

Comprehensive vulnerability assessment using multiple tools and AI analysis.
wfuzz Execute

Advanced web application fuzzer for discovering hidden resources and parameters.
wifite Execute

Automated wireless auditor. Automatically attacks multiple WEP, WPA, and WPS encrypted networks.
winpeas Execute

Windows privilege escalation awesome script. Automated enumeration.
wpscan Execute

WordPress vulnerability scanner. Detects vulnerable plugins, themes, and WordPress core issues.
xsstrike Execute

Advanced XSS (Cross-Site Scripting) detection and exploitation suite.

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

High-risk tools in MCP Kali Pentest

Tools at high risk

Attacks that target this class

More on MCP Kali Pentest

Enforce policy on every MCP Kali Pentest tool call.