# Zebbern Kali MCP MCP server

Agent View of the PolicyLayer registry record for Zebbern Kali MCP: identity, probed posture, risk grade, and all 133 tools classified. HTML page: https://policylayer.com/tools/zebbern-zebbern-kali-mcp

## Facts

- Server id: `zebbern/zebbern-kali-mcp`
- Homepage: https://github.com/zebbern/zebbern-kali-mcp
- Registry record: grade F, identity unverified
- Lifecycle: active
- Rate-limited: no
- Tools: 133
- Tool categories present: Destructive, Execute, Financial, Read, Write
- Tags: zebbern zebbern kali mcp, payments, admin, automation
- Record last modified: 2026-09-04T02:59:22.607Z

## Tools (133)

| Tool | Category | Risk | Record |
| --- | --- | --- | --- |
| `callback_clear` | Destructive | Critical | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/callback-clear.md |
| `hosts_clear` | Destructive | Critical | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/hosts-clear.md |
| `hosts_remove` | Destructive | Critical | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/hosts-remove.md |
| `msf_session_destroy` | Destructive | Critical | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/msf-session-destroy.md |
| `msf_session_destroy_all` | Destructive | Critical | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/msf-session-destroy-all.md |
| `pivot_remove` | Destructive | Critical | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/pivot-remove.md |
| `ad_asreproast` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/ad-asreproast.md |
| `ad_bloodhound_collect` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/ad-bloodhound-collect.md |
| `ad_kerberoast` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/ad-kerberoast.md |
| `ad_ldap_enum` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/ad-ldap-enum.md |
| `ad_password_spray` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/ad-password-spray.md |
| `ad_psexec` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/ad-psexec.md |
| `ad_secretsdump` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/ad-secretsdump.md |
| `ad_wmiexec` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/ad-wmiexec.md |
| `api_auth_bypass_test` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/api-auth-bypass-test.md |
| `api_ffuf_fuzz` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/api-ffuf-fuzz.md |
| `api_fuzz_endpoint` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/api-fuzz-endpoint.md |
| `api_graphql_fuzz` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/api-graphql-fuzz.md |
| `api_jwt_crack` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/api-jwt-crack.md |
| `api_kiterunner_scan` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/api-kiterunner-scan.md |
| `api_newman_run` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/api-newman-run.md |
| `api_nuclei_scan` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/api-nuclei-scan.md |
| `api_rate_limit_test` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/api-rate-limit-test.md |
| `callback_check` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/callback-check.md |
| `callback_generate` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/callback-generate.md |
| `callback_latest` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/callback-latest.md |
| `callback_start` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/callback-start.md |
| `callback_stop` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/callback-stop.md |
| `callback_wait` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/callback-wait.md |
| `ctf_connect` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/ctf-connect.md |
| `ctf_submit_flag` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/ctf-submit-flag.md |
| `cve_search` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/cve-search.md |
| `exec_stream` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/exec-stream.md |
| `exploit_suggest_for_service` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/exploit-suggest-for-service.md |
| `exploit_suggest_from_nmap` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/exploit-suggest-from-nmap.md |
| `fingerprint_waf` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/fingerprint-waf.md |
| `job_cancel` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/job-cancel.md |
| `msf_session_create` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/msf-session-create.md |
| `msf_session_execute` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/msf-session-execute.md |
| `parse_tool_output` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/parse-tool-output.md |
| `payload_generate` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/payload-generate.md |
| `payload_host_start` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/payload-host-start.md |
| `payload_host_stop` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/payload-host-stop.md |
| `payload_one_liner` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/payload-one-liner.md |
| `pivot_add_pivot` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/pivot-add-pivot.md |
| `pivot_chisel_client` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/pivot-chisel-client.md |
| `pivot_chisel_server` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/pivot-chisel-server.md |
| `pivot_generate_proxychains` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/pivot-generate-proxychains.md |
| `pivot_ligolo_start` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/pivot-ligolo-start.md |
| `pivot_socat_forward` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/pivot-socat-forward.md |
| `pivot_ssh_dynamic` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/pivot-ssh-dynamic.md |
| `pivot_ssh_local` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/pivot-ssh-local.md |
| `pivot_ssh_remote` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/pivot-ssh-remote.md |
| `pivot_stop_all_tunnels` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/pivot-stop-all-tunnels.md |
| `pivot_stop_tunnel` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/pivot-stop-tunnel.md |
| `reverse_shell_command` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/reverse-shell-command.md |
| `reverse_shell_download_content` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/reverse-shell-download-content.md |
| `reverse_shell_generate_payload` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/reverse-shell-generate-payload.md |
| `reverse_shell_listener_start` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/reverse-shell-listener-start.md |
| `reverse_shell_send_payload` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/reverse-shell-send-payload.md |
| `reverse_shell_status` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/reverse-shell-status.md |
| `reverse_shell_stop` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/reverse-shell-stop.md |
| `reverse_shell_upload_content` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/reverse-shell-upload-content.md |
| `send_input` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/send-input.md |
| `ssh_session_command` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/ssh-session-command.md |
| `ssh_session_start` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/ssh-session-start.md |
| `ssh_session_stop` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/ssh-session-stop.md |
| `ssh_session_upload_content` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/ssh-session-upload-content.md |
| `ssh_sessions` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/ssh-sessions.md |
| `tools_amass` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/tools-amass.md |
| `tools_arjun` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/tools-arjun.md |
| `tools_assetfinder` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/tools-assetfinder.md |
| `tools_byp4xx` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/tools-byp4xx.md |
| `tools_enum4linux` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/tools-enum4linux.md |
| `tools_fierce` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/tools-fierce.md |
| `tools_gobuster` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/tools-gobuster.md |
| `tools_gowitness` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/tools-gowitness.md |
| `tools_httpx` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/tools-httpx.md |
| `tools_hydra` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/tools-hydra.md |
| `tools_john` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/tools-john.md |
| `tools_katana` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/tools-katana.md |
| `tools_masscan` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/tools-masscan.md |
| `tools_nikto` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/tools-nikto.md |
| `tools_nmap` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/tools-nmap.md |
| `tools_sqlmap` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/tools-sqlmap.md |
| `tools_ssh_audit` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/tools-ssh-audit.md |
| `tools_sslscan` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/tools-sslscan.md |
| `tools_subfinder` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/tools-subfinder.md |
| `tools_subzy` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/tools-subzy.md |
| `tools_waybackurls` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/tools-waybackurls.md |
| `tools_wpscan` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/tools-wpscan.md |
| `vpn_connect` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/vpn-connect.md |
| `vpn_disconnect` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/vpn-disconnect.md |
| `zebbern_exec` | Execute | High | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/zebbern-exec.md |
| `ad_smb_enum` | Read | Low | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/ad-smb-enum.md |
| `ad_tools_status` | Read | Low | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/ad-tools-status.md |
| `api_graphql_introspect` | Read | Low | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/api-graphql-introspect.md |
| `api_jwt_analyze` | Read | Low | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/api-jwt-analyze.md |
| `callback_list` | Read | Low | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/callback-list.md |
| `callback_status` | Read | Low | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/callback-status.md |
| `ctf_download_file` | Read | Low | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/ctf-download-file.md |
| `ctf_get_challenge` | Read | Low | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/ctf-get-challenge.md |
| `ctf_list_challenges` | Read | Low | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/ctf-list-challenges.md |
| `ctf_scoreboard` | Read | Low | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/ctf-scoreboard.md |
| `ctf_status` | Read | Low | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/ctf-status.md |
| `cve_package_audit` | Read | Low | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/cve-package-audit.md |
| `exploit_details` | Read | Low | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/exploit-details.md |
| `exploit_search` | Read | Low | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/exploit-search.md |
| `fingerprint_headers` | Read | Low | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/fingerprint-headers.md |
| `fingerprint_url` | Read | Low | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/fingerprint-url.md |
| `health` | Read | Low | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/health.md |
| `hosts_list` | Read | Low | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/hosts-list.md |
| `job_list` | Read | Low | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/job-list.md |
| `job_output` | Read | Low | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/job-output.md |
| `job_status` | Read | Low | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/job-status.md |
| `kali_download` | Read | Low | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/kali-download.md |
| `msf_session_list` | Read | Low | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/msf-session-list.md |
| `payload_list` | Read | Low | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/payload-list.md |
| `payload_templates` | Read | Low | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/payload-templates.md |
| `pivot_list_pivots` | Read | Low | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/pivot-list-pivots.md |
| `pivot_list_tunnels` | Read | Low | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/pivot-list-tunnels.md |
| `read_output` | Read | Low | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/read-output.md |
| `ssh_estimate_transfer` | Read | Low | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/ssh-estimate-transfer.md |
| `ssh_session_download_content` | Read | Low | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/ssh-session-download-content.md |
| `ssh_session_status` | Read | Low | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/ssh-session-status.md |
| `system_network_info` | Read | Low | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/system-network-info.md |
| `target_download_file` | Read | Low | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/target-download-file.md |
| `tools_crtsh` | Read | Low | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/tools-crtsh.md |
| `vpn_status` | Read | Low | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/vpn-status.md |
| `exploit_copy` | Write | Medium | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/exploit-copy.md |
| `hosts_add` | Write | Medium | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/hosts-add.md |
| `kali_upload` | Write | Medium | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/kali-upload.md |
| `target_upload_file` | Write | Medium | https://policylayer.com/tools/zebbern-zebbern-kali-mcp/target-upload-file.md |

## Tool descriptions

- `msf_session_destroy` — Destroy a specific Metasploit session.
- `msf_session_destroy_all` — Destroy all active Metasploit sessions.
- `ad_asreproast` — Perform AS-REP Roasting to get hashes for accounts with pre-auth disabled.
- `api_auth_bypass_test` — Test for authentication bypass vulnerabilities.
- `api_jwt_crack` — Attempt to crack a JWT token's signing secret.
- `api_kiterunner_scan` — Scan API endpoints using Kiterunner for route discovery.
- `api_newman_run` — Run a Postman/Newman collection against API endpoints.
- `api_rate_limit_test` — Test API rate limiting controls.
- `exploit_suggest_for_service` — Get exploit suggestions for a specific service.
- `exploit_suggest_from_nmap` — Analyze nmap scan output and suggest exploits for discovered services.
- `fingerprint_waf` — Detect Web Application Firewall (WAF) on a target URL.
- `job_cancel` — Cancel a running background job and its child process group.
- `msf_session_create` — Create a new persistent Metasploit (msfconsole) session.
- `payload_host_start` — Start HTTP server to host generated payloads for download.
- `payload_host_stop` — Stop the payload hosting server.
- `pivot_chisel_client` — Start a Chisel client to connect to a Chisel server.
- `pivot_chisel_server` — Start a Chisel server for tunneling.
- `pivot_generate_proxychains` — Generate a proxychains configuration for pivoting through SOCKS proxy.
- `pivot_ligolo_start` — Start a Ligolo-ng proxy server for pivoting.
- `pivot_socat_forward` — Create a socat port forward.
- `pivot_ssh_dynamic` — Create an SSH dynamic SOCKS proxy.
- `pivot_stop_all_tunnels` — Stop all active tunnels and port forwards.
- `pivot_stop_tunnel` — Stop a specific tunnel.
- `reverse_shell_download_content` — Download file content from target via reverse shell and return as base64.
- `reverse_shell_stop` — Stop a reverse shell session.
- `ssh_session_stop` — Stop/disconnect an SSH session.
- `ad_smb_enum` — Enumerate SMB shares and information on a target.
- `ad_tools_status` — Check which AD tools are available on the Kali server.
- `api_graphql_introspect` — Introspect a GraphQL endpoint to discover schema, types, and queries.
- `api_jwt_analyze` — Analyze a JWT token for weaknesses.
- `ctf_get_challenge` — Get full details for a specific CTF challenge.
- `ctf_list_challenges` — List all available CTF challenges.
- `ctf_scoreboard` — Fetch the current CTF scoreboard.
- `ctf_status` — Check current CTF platform connection status.
- `exploit_details` — Get full details and source code for an exploit.
- `exploit_search` — Search for exploits using searchsploit.
- `fingerprint_headers` — Analyze HTTP response headers for security posture.
- `fingerprint_url` — Fingerprint a URL to detect technologies, frameworks, and CMS.
- `hosts_list` — List all managed /etc/hosts entries added via Kali-MCP.
- `job_output` — Poll recent bounded stdout and stderr from a background job.
- `job_status` — Return state and exit metadata for a background command job.
- `kali_download` — Download file content from the Kali server as base64.
- `payload_list` — List all generated payloads.
- `payload_templates` — List available payload templates and encoders for msfvenom.
- `pivot_list_pivots` — List all configured pivot points/routes.
- `ssh_estimate_transfer` — Estimate file transfer time over SSH.
- `ssh_session_download_content` — Download file content from a remote host via SSH as base64.
- `ssh_session_status` — Check the status of an SSH session.
- `system_network_info` — Get comprehensive network information for the Kali Linux system.
- `exploit_copy` — Copy an exploit to a working directory for modification.

## Related servers

- Delx Mcp A2a (1082 tools) — https://policylayer.com/tools/io-github-davidmosiah-delx-mcp-a2a.md
- Delx Protocol — Agent Recovery & Continuity (1076 tools) — https://policylayer.com/tools/io-github-davidmosiah-delx-protocol.md
- Delx MCP Server (740 tools) — https://policylayer.com/tools/io-github-davidmosiah-delx-mcp-server.md
- Binance MCP Server (734 tools) — https://policylayer.com/tools/nirholas-binance-mcp.md
- Yaver (664 tools) — https://policylayer.com/tools/io-github-kivanccakmak-yaver.md
- Chaoxing Agent (565 tools) — https://policylayer.com/tools/chaoxing-agent.md
- GoHighLevel MCP Server (559 tools) — https://policylayer.com/tools/busybee3333-go-high-level-mcp-2026-complete.md
- Spotify (544 tools) — https://policylayer.com/tools/novalux12-spotify-mcp.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=zebbern-zebbern-kali-mcp · API: https://policylayer.com/registry/api · Recommended policies for every tool: https://policylayer.com/policies/zebbern-zebbern-kali-mcp