msf_session_execute

What msf_session_execute does on Zebbern Kali MCP

AI agents invoke msf_session_execute to trigger actions in Zebbern Kali MCP. What it does depends on the arguments the agent supplies, and its effects often reach beyond the immediate call: builds kicked off, notifications sent, workflows started.

Why msf_session_execute is rated High

This tool executes arbitrary code or commands through Metasploit sessions on target systems. While classified as Execute rather than Destructive (as the focus is on command execution rather than irreversible deletion), the severity is critical because Metasploit sessions enable complete system compromise, privilege escalation, data exfiltration, and lateral movement.

From the tool's definition Tool name 'msf_session_execute' indicates execution of Metasploit framework sessions. Description is empty but context shows this is part of a Kali Linux penetration testing toolkit with capabilities like psexec, wmiexec, and secretsdump—all known remote code…

The rule that runs msf_session_execute safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Zebbern Kali MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For msf_session_execute, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "msf_session_execute": {
      "limits": [
        {
          "counter": "msf_session_execute_rate",
          "window": "minute",
          "max": 10,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about msf_session_execute