kali_mcp-mcp-server AI Integration

Execute an Nmap network scan to discover hosts, open ports, services, and versions. Args: target: Target IP address or hostname to scan (e.g., '192.168.1.1' or 'example.com') scan_type: Nmap scan type - use '-sV' for version detection, '-sS' for SYN scan, '-sT' for TCP connect, '-sU' for UDP scan, or '-A' for aggressive scan (default: '-sV') ports: Ports to scan - can be single port '80', range '1-1000', comma-separated list '22,80,443', or empty for default ports (default: '') additional_args: Additional Nmap arguments like '-O' for OS detection or '--script vuln' for vulnerability scripts (default: '') Returns: Scan results including discovered ports, services, and version information

Execute Gobuster directory/DNS/vhost enumeration to discover hidden paths, subdomains, or virtual hosts. Args: url: Target URL (http://example.com) or domain for DNS mode mode: Scan mode - 'dir' for directory bruteforce, 'dns' for subdomain enumeration, 'vhost' for virtual host discovery, or 'fuzz' for fuzzing (default: 'dir') wordlist: Path to wordlist file on Kali server (default: '/usr/share/wordlists/dirb/common.txt') additional_args: Additional Gobuster arguments like '-x php,html' for file extensions or '-t 50' for thread count (default: '') Returns: Discovered directories, subdomains, or virtual hosts with response codes

Execute Dirb web content scanner to discover hidden directories and files through dictionary-based attacks. Args: url: Target URL to scan (e.g., http://example.com) wordlist: Path to wordlist file on Kali server (default: '/usr/share/wordlists/dirb/common.txt') additional_args: Additional Dirb arguments like '-r' for non-recursive or '-z 10' for millisecond delay (default: '') Returns: Discovered directories and files with HTTP response codes

Execute Nikto web server vulnerability scanner to identify server misconfigurations, outdated software, and security issues. Args: target: Target URL or IP address to scan (e.g., 'http://example.com' or '192.168.1.1') additional_args: Additional Nikto arguments like '-Tuning x' for specific test types or '-port 8080' for custom port (default: '') Returns: Vulnerability findings, server information, and security recommendations

Execute SQLmap automated SQL injection detection and exploitation tool. WARNING: Can modify database contents. Args: url: Target URL to test for SQL injection vulnerabilities (e.g., 'http://example.com/page.php?id=1') data: POST data string for testing POST parameters (e.g., 'username=admin&password=test') (default: '') additional_args: Additional SQLmap arguments like '--batch' for non-interactive mode, '--dbs' to enumerate databases, or '--risk 3' for aggressive testing (default: '') Returns: SQL injection vulnerabilities found, database information, and exploitation results