redteam-mcp
A penetration testing MCP server that runs 20 hacking tools inside a Kali Linux Docker container, enabling AI assistants to execute security scans and attacks via natural language.
README
š“ Red Team MCP Server
A powerful penetration testing MCP server that runs 20 real hacking tools inside a Kali Linux Docker container and connects them directly to AI assistants like Cursor, Claude, or any MCP-compatible IDE.
Instead of typing commands manually, you just ask in plain English:
"Scan ports on 192.168.1.1" "Find subdomains of example.com" "Check if this site has SQL injection"
The AI calls the right tool, runs it in Kali Linux, and gives you the results.
š ļø Tools Included (20 total)
| Tool | Purpose |
|---|---|
| nmap | Port & service scanning |
| gobuster | Directory brute-forcing |
| ffuf | Web fuzzing |
| sqlmap | SQL injection |
| nikto | Web vulnerability scanning |
| nuclei | Template-based vuln scanning |
| whatweb | Technology fingerprinting |
| subfinder | Subdomain enumeration |
| httpx | HTTP probing |
| wpscan | WordPress scanning |
| amass | Attack surface mapping |
| hydra | Password brute-forcing |
| curl | Raw HTTP requests |
| dnsrecon | DNS enumeration |
| theHarvester | OSINT harvesting |
| wafw00f | WAF detection |
| sslscan | SSL/TLS auditing |
| commix | Command injection |
| arjun | Hidden parameter discovery |
| metasploit | Auxiliary module runner |
ā Requirements
Before you start, make sure you have these installed:
- Git ā https://git-scm.com/downloads
- Docker Desktop ā https://www.docker.com/products/docker-desktop (enable Linux containers)
- Python 3.11 ā https://www.python.org/downloads/release/python-3110 (only needed locally if you want to edit the server; the container handles everything else)
- Any MCP-compatible IDE: Cursor, VS Code + Kiro, Claude Desktop, etc.
Python version note: The project is written for Python 3.11+. The Docker container uses Kali's built-in Python 3 (3.12). Both work fine.
š Installation ā Step by Step
Step 1 ā Clone the repo
git clone https://github.com/YOUR_USERNAME/redteam-mcp.git
cd redteam-mcp
Step 2 ā Build the Docker image
This downloads Kali Linux and installs all 20 tools. Takes 10ā20 minutes the first time.
docker build -t redteam-mcp:latest .
You only ever need to run this once (or when you update the project).
Step 3 ā Start the container
Windows (PowerShell):
.\run.ps1
Mac / Linux:
bash run.sh
Verify it's running:
docker ps
You should see redteam-mcp with status Up.
Step 4 ā Connect your IDE
Open your MCP config file in your IDE and paste this:
{
"mcpServers": {
"redteam-kali": {
"command": "docker",
"args": [
"exec", "-i", "redteam-mcp",
"/app/.venv/bin/python", "/app/src/server.py"
],
"disabled": false,
"autoApprove": []
}
}
}
Where to paste it:
| IDE | Config file location |
|---|---|
| Cursor | ~/.cursor/mcp.json (global) or .cursor/mcp.json (project) |
| VS Code + Kiro | Already at .kiro/settings/mcp.json in this project |
| Claude Desktop | ~/Library/Application Support/Claude/claude_desktop_config.json (Mac) or %APPDATA%\Claude\claude_desktop_config.json (Windows) |
After pasting, reload your IDE window (Ctrl+Shift+P ā Reload Window).
Step 5 ā Start asking questions
You're ready. Just type in natural language:
Scan ports on scanme.nmap.org
Find subdomains of tesla.com
Check if http://testphp.vulnweb.com has SQL injection
Detect the WAF on cloudflare.com
Run a nikto scan on http://testphp.vulnweb.com
š Daily Usage Guide
Start the project
.\run.ps1
Then reload your IDE window.
Stop when done
docker stop redteam-mcp
Restart the container
docker restart redteam-mcp
Full reset (if something breaks)
docker rm -f redteam-mcp
.\run.ps1
Rebuild the image (only after editing Dockerfile or server.py)
docker rm -f redteam-mcp
docker build -t redteam-mcp:latest .
.\run.ps1
Check container logs
docker logs redteam-mcp
Open a shell inside the container
docker exec -it redteam-mcp /bin/bash
ā ļø Legal Notice
Only use these tools against systems you own or have explicit written permission to test. Unauthorized scanning is illegal. The legal test target used in examples is scanme.nmap.org (provided by the nmap project for this purpose).
š Project Structure
redteam-mcp/
āāā src/
ā āāā server.py # MCP server with all 20 tools
āāā Dockerfile # Kali Linux multi-stage build
āāā requirements.txt # Python deps (mcp only)
āāā run.ps1 # Start container (Windows)
āāā run.sh # Start container (Mac/Linux)
āāā .kiro/
āāā settings/
āāā mcp.json # IDE MCP config
Recommended Servers
playwright-mcp
A Model Context Protocol server that enables LLMs to interact with web pages through structured accessibility snapshots without requiring vision models or screenshots.
Magic Component Platform (MCP)
An AI-powered tool that generates modern UI components from natural language descriptions, integrating with popular IDEs to streamline UI development workflow.
Audiense Insights MCP Server
Enables interaction with Audiense Insights accounts via the Model Context Protocol, facilitating the extraction and analysis of marketing insights and audience data including demographics, behavior, and influencer engagement.
VeyraX MCP
Single MCP tool to connect all your favorite tools: Gmail, Calendar and 40 more.
graphlit-mcp-server
The Model Context Protocol (MCP) Server enables integration between MCP clients and the Graphlit service. Ingest anything from Slack to Gmail to podcast feeds, in addition to web crawling, into a Graphlit project - and then retrieve relevant contents from the MCP client.
Kagi MCP Server
An MCP server that integrates Kagi search capabilities with Claude AI, enabling Claude to perform real-time web searches when answering questions that require up-to-date information.
E2B
Using MCP to run code via e2b.
Neon Database
MCP server for interacting with Neon Management API and databases
Exa Search
A Model Context Protocol (MCP) server lets AI assistants like Claude use the Exa AI Search API for web searches. This setup allows AI models to get real-time web information in a safe and controlled way.
Qdrant Server
This repository is an example of how to create a MCP server for Qdrant, a vector search engine.