get_attack_strategy

What get_attack_strategy does on Kali Security MCP

AI agents call get_attack_strategy to retrieve information from Kali Security MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_attack_strategy is rated Low

This tool retrieves or queries strategic recommendations from a knowledge base without executing attacks, modifying data, or triggering external operations. It performs passive analysis of historical data to inform decision-making. While the context is security/penetration testing, the tool itself only reads and recommends; actual attack execution would occur through sibling tools like 'adaptive_execute_strategy'.

From the tool's definition Tool name 'get_attack_strategy' and description '获取攻击策略推荐 - 基于历史成功率' (Get attack strategy recommendations - based on historical success rate) indicate data retrieval and analysis of existing strategies and metrics, not execution or modification of systems.

The rule that runs get_attack_strategy safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Kali Security MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_attack_strategy, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_attack_strategy": {}
  }
}

Questions about get_attack_strategy