# Kali MCP Server MCP server

Agent View of the PolicyLayer registry record for Kali MCP Server: identity, probed posture, risk grade, and all 19 tools classified. HTML page: https://policylayer.com/tools/azza39925-kali-mcp-server

## Facts

- Server id: `azza39925/kali-mcp-server`
- Homepage: https://github.com/azza39925/kali-mcp-server
- Registry record: grade F, identity unverified
- Lifecycle: active
- Rate-limited: no
- Tools: 19
- Tool categories present: Read, Write
- Tags: azza39925 kali mcp server
- Record last modified: 2026-07-01T01:23:21.203Z

## Tools (19)

| Tool | Category | Risk | Record |
| --- | --- | --- | --- |
| `kali_exploit_msfvenom_generate` | Execute | High | https://policylayer.com/tools/azza39925-kali-mcp-server/kali-exploit-msfvenom-generate.md |
| `kali_network_masscan_scan` | Execute | High | https://policylayer.com/tools/azza39925-kali-mcp-server/kali-network-masscan-scan.md |
| `kali_network_netdiscover_scan` | Execute | High | https://policylayer.com/tools/azza39925-kali-mcp-server/kali-network-netdiscover-scan.md |
| `kali_network_nmap_discover` | Execute | High | https://policylayer.com/tools/azza39925-kali-mcp-server/kali-network-nmap-discover.md |
| `kali_network_nmap_scan` | Execute | High | https://policylayer.com/tools/azza39925-kali-mcp-server/kali-network-nmap-scan.md |
| `kali_network_tcpdump_capture` | Execute | High | https://policylayer.com/tools/azza39925-kali-mcp-server/kali-network-tcpdump-capture.md |
| `kali_network_tshark_capture` | Execute | High | https://policylayer.com/tools/azza39925-kali-mcp-server/kali-network-tshark-capture.md |
| `kali_password_hashcat_crack` | Execute | High | https://policylayer.com/tools/azza39925-kali-mcp-server/kali-password-hashcat-crack.md |
| `kali_password_hydra_brute` | Execute | High | https://policylayer.com/tools/azza39925-kali-mcp-server/kali-password-hydra-brute.md |
| `kali_password_john_crack` | Execute | High | https://policylayer.com/tools/azza39925-kali-mcp-server/kali-password-john-crack.md |
| `kali_web_ffuf_fuzz` | Execute | High | https://policylayer.com/tools/azza39925-kali-mcp-server/kali-web-ffuf-fuzz.md |
| `kali_web_gobuster_dir` | Execute | High | https://policylayer.com/tools/azza39925-kali-mcp-server/kali-web-gobuster-dir.md |
| `kali_web_gobuster_dns` | Execute | High | https://policylayer.com/tools/azza39925-kali-mcp-server/kali-web-gobuster-dns.md |
| `kali_web_nikto_scan` | Execute | High | https://policylayer.com/tools/azza39925-kali-mcp-server/kali-web-nikto-scan.md |
| `kali_web_nuclei_scan` | Execute | High | https://policylayer.com/tools/azza39925-kali-mcp-server/kali-web-nuclei-scan.md |
| `kali_web_sqlmap_test` | Execute | High | https://policylayer.com/tools/azza39925-kali-mcp-server/kali-web-sqlmap-test.md |
| `kali_web_wpscan_scan` | Execute | High | https://policylayer.com/tools/azza39925-kali-mcp-server/kali-web-wpscan-scan.md |
| `kali_exploit_searchsploit_examine` | Read | Low | https://policylayer.com/tools/azza39925-kali-mcp-server/kali-exploit-searchsploit-examine.md |
| `kali_exploit_searchsploit_search` | Read | Low | https://policylayer.com/tools/azza39925-kali-mcp-server/kali-exploit-searchsploit-search.md |

## Tool descriptions

- `kali_exploit_msfvenom_generate` — Generate custom payloads for Metasploit Framework. Msfvenom is a payload generator and encoder combining msfpayload and msfencode. WARNING: Only use generated payloads for authorized security testing. Common Payloads: - windows/meterpret…
- `kali_network_masscan_scan` — High-speed port scanner capable of scanning the entire internet in minutes. Use with caution and proper authorization.
- `kali_network_netdiscover_scan` — ARP reconnaissance tool for discovering hosts on a local network. Supports active and passive modes.
- `kali_network_nmap_discover` — Discover live hosts on a network using Nmap. Supports ping, ARP, TCP, UDP, and ICMP discovery methods.
- `kali_network_nmap_scan` — Perform network port scanning using Nmap. Nmap (Network Mapper) is a powerful network scanner for discovering hosts, services, and potential vulnerabilities. Capabilities: - TCP SYN, Connect, UDP, and stealth scans - Service version dete…
- `kali_network_tcpdump_capture` — Capture network packets for analysis. Supports BPF filters and can save to PCAP files.
- `kali_network_tshark_capture` — Wireshark CLI for packet capture and analysis with advanced filtering and multiple output formats.
- `kali_password_hashcat_crack` — Advanced password recovery tool using GPU acceleration. Supports 300+ hash types.
- `kali_password_hydra_brute` — Fast network login brute-forcer supporting many protocols. Hydra is a parallelized login cracker which supports numerous protocols. Supported Services: - SSH, FTP, HTTP(S), MySQL, SMB, RDP, Telnet, and more WARNING: Only use on systems y…
- `kali_password_john_crack` — John the Ripper password cracker supporting many hash formats and attack modes.
- `kali_web_ffuf_fuzz` — Fast web fuzzer for discovering hidden files, directories, and parameters. URL must contain FUZZ keyword.
- `kali_web_gobuster_dir` — Enumerate directories and files on web servers using wordlists. Gobuster is a fast directory/file brute-forcing tool written in Go. Features: - Fast multi-threaded scanning - Customizable file extensions - Status code filtering - Recursi…
- `kali_web_gobuster_dns` — Enumerate subdomains using DNS brute-forcing with wordlists.
- `kali_web_nikto_scan` — Comprehensive web server scanner for vulnerabilities, misconfigurations, and security issues.
- `kali_web_nuclei_scan` — Template-based vulnerability scanner with extensive CVE coverage and custom templates support.
- `kali_web_sqlmap_test` — Automated SQL injection testing and exploitation. SQLMap automates the detection and exploitation of SQL injection vulnerabilities. WARNING: Only use on systems you have authorization to test. Features: - Automatic SQL injection detectio…
- `kali_web_wpscan_scan` — WordPress security scanner for finding vulnerabilities in WordPress sites, themes, and plugins.
- `kali_exploit_searchsploit_examine` — Examine and display the contents of an exploit from searchsploit results.
- `kali_exploit_searchsploit_search` — Search the Exploit Database for public exploits and vulnerability information. SearchSploit is a command-line search tool for Exploit-DB. Search Options: - By software name/version - By CVE identifier - By platform (linux, windows, php, …

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=azza39925-kali-mcp-server · API: https://policylayer.com/registry/api · Recommended policies for every tool: https://policylayer.com/policies/azza39925-kali-mcp-server