
项目说明
🛡️ CTF-Solver
<di="center">
AI-Powered Offensi Toolkit
Bridge your AI assistant to 55+ Kali Linux security tools Context Protocol
![License: MIT]()
![Python 3.12+]()



![smithery badge]()
Features • Quick Start • Documentation • Architecture • Legal
Language: English | 한국어
</div>
---
📖 O
MCP Kali Server transforms your AI assistant into a powerful offensi companion by pro seamless access to professional penetration testing and CTF-solving tools from Kali Linux.
Built on the Model Context Protocol (MCP), this ser AI assistants like Claude, ChatGPT, and others to orchestrate complex security workflows, automate CTF challenge solving, and perform intelligent penetration testing through natural language.
🎯 What Can It Do?
---
✨ Features
🎓 7 Major CTF Categories Supported
<table>
<tr>
<td width="50%">
🔓 Pwnable (80% co)
Buffer o exploitationROP chain buildingFormat string attacksHeap exploitationTools: checksec, ROPgadget, pwntools, radare2🔐 Cryptography (50-80% co)
RSA attacks (factorization, Wiener, Hastad)Hash cracking (MD5, SHA, bcrypt)Mathematical cryptanalysisTools: hashcat, RsaCtfTool, SageMath, john🔍 Forensics (43-70% co)
Automated memory analysis ( workflows)Automated disk forensics (SleuthKit workflows)Automated malware hunting (YARA + IOC extraction)Memory dump analysis & steganography detectionFile carving & recoveryTools: , SleuthKit, YARA, binwalk, steghide, foremost🌐 Web Security (90% co)
SQL injection testingDirectory enumeration scanningTools: sqlmap, gobuster, nikto, wpscan</td>
<td width="50%">
☁️ Cloud Security (52-85% co)
AWS/GCP/Azure enumerationS3 bucket scanningIAM pri escalationTools: aws-cli, pacu, s3scanner⛓️ Web3 & Blockchain (40-75% co)
Smart contract analysisReentrancy attacksInteger o detectionTools: Slither, Mythril, web3.py, solc🔄 Re (67% co)
Binary disassemblyDynamic analysisDeobfuscationTools: radare2, ltrace, strace, objdump</td>
</tr>
</table>
🛠️ 55+ Professional Security Tools
Network Recon: nmap, masscan, enum4linuxWeb Testing: gobuster, dirb, nikto, sqlmap, wpscan, ffufPassword Attacks: hydra, john, hashcatBinary Analysis: checksec, ROPgadget, radare2, pwntools, GhidraForensics: , SleuthKit (mmls, fls, mactime), YARA, binwalk, foremost, steghide, exiftool, tesseract, md5deepCryptography: RsaCtfTool, SageMath, hashcat, opensslCloud: AWS CLI, Pacu, s3scanner, ScoutSuiteWeb3: Slither, Mythril, web3.py, solc, GanacheExploitation: metasploit, searchsploitAnd many more...🤖 AI-Powered Automation
Automatic Detection: AI analyzes binaries and identifies exploitable weaknessesMulti-Step Attack Chains: Orchestrate complex exploitation workflowsAutomated Forensics Workflows: Multi-stage memory analysis, disk forensics, and malware huntingSession Management: Persistent workspaces for multi-step analysisInteracti: Bidirectional communication with running exploitsIntelligent Tool Selection: AI chooses appropriate tools based on context📚 Comprehensi
Workflow Prompts: Pre-built templates for common CTF scenariosProblem-Solving Guide: Ready-to-use prompts for each categoryTool Installation: Automated setup scripts for Kali LinuxBest Practices: Security testing guidelines and ethics---
🚀 Quick Start
Prerequisites
Option 1: Docker (Recommended) 🐳
Docker & Docker Compose installedAI Assistant with MCP support (Claude Desktop, 5ire, etc.)Option 2: Nati
Kali Linux (or any Linux with security tools installed)Python 3.12+AI Assistant with MCP support (Claude Desktop, 5ire, etc.)---
Option 1: Docker Installation (Recommended) 🐳
One-command setup - all tools included!
1. Clone and start
That's it! The server is now running on with all 55+ security tools pre-installed.
2. Configure your MCP client
For Claude Desktop (edit ~/.config/Claude/claude_desktop_config.json):
3. Start solving CTFs! 🎉
---
Option 2: Nati
1. Clone the repository
2. Install dependencies
3. Install security tools (see KALI_TOOLS_INSTALLATION.md)
4. Start the Kali server
5. Configure your MCP client
For Claude Desktop (edit ~/.config/Claude/claude_desktop_config.json):
For 5ire Desktop:
Add MCP server with command: python3 /path/to/src/my_ser.py --server 6. Start solving CTFs! 🎉
---
🏗️ Architecture
Components
Kali Server (kali_server.py)
Flask HTTP API server (port 5000)73+ security tool endpointsAd forensics automation (memory, disk, malware)Session-based workspacesInteracti managementGraceful timeout handling (180s default)MCP Client (src/my_ser.py)
FastMCP protocol implementation55+ MCP tool wrappersAI-guided workflow promptsResources (ser, wordlists, guides)---
💡 Usage Examples
Example 1: RSA Cryptography Challenge
Example 2: Web Application Testing
Example 3: Binary Exploitation (Pwnable)
Example 4: Memory Forensics
Example 5: Automated Forensics Workflow
---
📚 Documentation
PROBLEM_SOL.md - Ready-to-use AI prompts for each CTF categoryKALI_TOOLS_INSTALLATION.md - Complete tool installation guide with automated scriptsCTF_ENHANCEMENT.md - Ad features and capability analysisCLAUDE.md - Comprehensi for AI assistants working with this codebase---
🎮 Supported CTF Platforms
This tool works with all major CTF platforms:
HackTheBox (HTB)TryHackMe (THM)PicoCTFCTFtime competitionsOpwnable.kr / pwnable.twRoot-MeRingZer0 CTFAnd many more!---
🎯 Use Cases
✅ Authorized & Legal
CTF competitions and wargamesAuthorized penetration testing (with written permission)Bug bounty programs (within scope)Security research and educationPersonal lab enCapture The Flag training❌ Prohibited
Unauthorized access to systemsMalicious hacking or attacksTesting without explicit permissionAny illegal acti---
🐳 Docker Deployment
Quick Start with Docker
Using Docker Compose (Recommended)
Using Docker directly
Docker Commands
Benefits of Docker Deployment
✅ Zero Configuration - All 55+ tools pre-installed
✅ Cross-Platform - Works on Windows, Mac, Linux
✅ Isolated En - Safe malware analysis
✅ Control - Reproducible CTF en
✅ Easy Updates - docker-compose pull && docker-compose up -d
✅ Resource Limits - Controlled CPU/memory usage
Persistent Data
The Docker setup automatically persists:
Sessions: ./sessions/ - Acti sessionsWorkspaces: ./workspaces/ - Challenge files and resultsCustom wordlists: ./wordlists/ (mount your own)---
🔧 Configuration
En
Custom Port
Remote Access (SSH Tunnel)
---
🤝 Contributing
Contributions are welcome! Please feel free to submit a Pull Request.
De Setup
---
📰 Media & Articles
![How MCP is Re Offensi]()
📝 How MCP is Re Offensi - Medium Article by Author
---
⚠️ Legal Notice
FOR AUTHORIZED SECURITY TESTING ONLY
This tool is designed exclusively for:
✅ Authorized penetration testing with written permission
✅ CTF competitions and educational wargames
✅ Security research in controlled en
✅ Bug bounty programs within defined scope
✅ Personal lab en you own
❌ Unauthorized access to systems
❌ Malicious hacking or attacks
❌ Testing without explicit permission
❌ Any illegal acti
By using this tool, you agree to:
Obtain proper authorization before testing any systemsComply with all applicable laws and regulationsUse this tool responsibly and ethicallyAccept full responsibility for your actionsThe authors assume NO responsibility for misuse. Unauthorized access to computer systems is illegal and punishable by law.
---
📄 License
This project is licensed under the MIT License - see the LICENSE file for details.
---
🙏 Credits
Author: Yousof NahyaInspired by: Project AstroBuilt with: FastMCP, Flask, and the offensi communityPowered by: Kali Linux, Model Context Protocol---
🔗 Links
GitHub Repository: github.com/Wh0am123/MCP-Kali-ServerModel Context Protocol: modelcontextprotocol.ioKali Linux: kali.orgFastMCP: github.com/jlowin/fastmcp---
📊 Statistics
55+ Security Tools integrated7 CTF Categories supported73+ API Endpoints a3 Ad Forensics Workflows automated4 Workflow Prompts included100+ Pages of documentation---
<di="center">
⭐ Star this repo if you find it useful!
Made with ❤️ by the offensi community
</div>
项目信息
开发语言:Python
Star 数:63
技术要点
该项目属于CTF思路方向的开源资源,代码结构清晰,适合安全研究人员学习参考。项目围绕CTF思路相关项目展开,提供了可运行的实现,对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。
从技术实现角度看,此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论,梳理项目的初始化流程、核心模块职责与数据流转,逐步掌握其中的技术细节与设计思路。
使用与学习建议
1. 下载源码压缩包,解压到本地环境。
2. 根据项目类型准备对应的运行环境与依赖。
3. 按照 README 中的步骤完成配置与部署。
4. 在隔离的测试环境中运行验证,避免影响生产系统。
免责声明
本资源来源于开源社区,仅供安全研究、技术学习与合法授权范围内的攻防演练使用,请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。