Kali Pentest — Security skill for Claude Code

English | [简体中文](README.zh.md)

kali-pentest

A penetration testing skill built on Kali Linux for AI agents such as Claude Code, OpenClaw, and Hermes Agent. Currently includes 269 CLI tools across 14 categories. Built-in coverage matrices, zero-findings fallbacks, and objective stopping conditions for each scenario ensure testing depth.

Unlike traditional automated penetration testing tools, the AI agent connects to a Kali environment via SSH or Docker, then autonomously plans the attack path based on the target, selects tools, integrates and analyzes results across phases to adapt the penetration strategy, and produces a structured report — with mandatory authorization checks and human approval gates for high-risk actions.

[!WARNING] **Authorized Use Only** — This project is intended solely for authorized penetration testing, security research, and educational purposes. Always obtain explicit written permission before testing any target. Unauthorized access to computer systems is illegal.

---

Demo

A simulated end-to-end penetration test with mock data.

**Targets**: 192.168.1.101 (Ubuntu 24 — 8 services) + 192.168.1.102 (Windows Server 2022 — 8 services).

Initial phases — connectivity verification, host discovery, and port scanning: 

Deep testing phase — vulnerability detection and zero-findings fallback: 

**Attack chain discovered**: Redis no-auth → SSH shell → SUID privesc → root → path traversal reads MSSQL creds → xp_cmdshell → credential reuse → domain admin → secretsdump

Open [`demo/player.html`](https://x-glacier.github.io/kali-pentest/demo/player.html) in a browser to watch the recording with the asciinema player. Or play