Loading story…
Kali Linux published documentation for an AI-assisted penetration testing workflow that uses Anthropic’s Claude Desktop as a natural-language interface and the open-source Model Context Protocol (MCP) to translate prompts into tool execution on a Kali host. The described architecture separates a GUI “UI layer” (Claude Desktop on macOS/Windows), an “execution layer” (a Kali system running an mcp-kali-server bridge that exposes tools), and an “intelligence layer” (Anthropic’s Claude Sonnet 4.5 in the cloud). The goal is to let operators request tasks like port scanning and web checks in plain language, with the LLM planning and iterating through tool calls while returning structured results.
This is not an incident report but a capability/workflow enablement that can materially change how offensive tooling is orchestrated, including by lowering the operational friction of chaining common recon and enumeration steps. Organizations evaluating similar agentic workflows should treat the MCP bridge and any AI agent runtime as a privileged automation surface (credentials, tokens, tool execution, and output handling), and consider isolation and least-privilege controls when experimenting with LLM-driven command execution in security tooling environments.
Get the actors, campaigns, and ATT&CK mapping behind it.
3 events from the most recent confirmed update back to the earliest known activity.
Subsequent coverage described the integration as a native AI-assisted penetration testing workflow and emphasized risks such as prompt injection, excessive permissions, and weak audit logging when MCP-enabled tools can execute commands. The reporting also noted Kali's cautions about privacy and engagement-scope concerns when using a cloud LLM in offensive security workflows.
In the published workflow, Kali showed an example where a user request in Claude Desktop caused the system to run an nmap scan of scanme.nmap.org through the MCP bridge. The demonstration included tool checks and execution of the scan from the Kali host, with results returned to the LLM-driven interface.
Kali Linux documented a method for using Claude Desktop on macOS with Anthropic Sonnet 4.5 to translate natural-language requests into security tool commands executed on a Kali host via the Model Context Protocol. The guide described enabling SSH access, installing and running the mcp-kali-server on Kali, and configuring Claude Desktop to invoke it remotely.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Get the adversaries, campaigns, and ATT&CK mapping behind this technique, with detections ready to deploy.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Two new **AI-assisted offensive security** efforts were highlighted: *BlacksmithAI*, an open-source penetration testing framework, and a **Kali Linux** workflow that enables natural-language control of common pentesting tools via Anthropic’s **Claude**. BlacksmithAI is described as a hierarchical, multi-agent system where an orchestrator decomposes assessment goals and delegates work to specialized agents aligned to typical pentest phases (recon, scanning/enumeration, vulnerability analysis, exploitation, and post-exploitation), then compiles results into reporting. Separately, Kali Linux was reported to support a native AI-assisted workflow by integrating Claude through the open-source **Model Context Protocol (MCP)**, using an `mcp-kali-server` package to translate plain-English prompts into tool execution (e.g., Nmap/Gobuster/Metasploit), parse outputs, and return structured findings and prioritized reporting. Both items reflect a broader shift toward **agentic and conversational interfaces** for offensive tooling, reducing reliance on manual CLI syntax while automating planning, execution, and summarization of assessment steps.
Jun 29, 2026
Kali Linux published a new installment in its LLM-driven workflow series showing how to run **LLM-assisted penetration testing fully offline/on-prem** by hosting the model, context/tooling layer, and client locally. The walkthrough uses **Ollama** (a local model runner) plus **5ire** as a desktop client, emphasizing operational security and privacy benefits versus cloud-hosted AI services, and noting the primary tradeoff is **GPU hardware and power cost** rather than SaaS subscriptions. The guide demonstrates an NVIDIA CUDA-based setup on a **GeForce GTX 1060 (6GB VRAM)**, including replacing the open-source `nouveau` driver with proprietary **non-free NVIDIA drivers** to enable CUDA acceleration and validating the environment with `nvidia-smi` after reboot. In parallel, SentinelOne published separate research on using **LLMs for cyber threat intelligence (CTI) information extraction**, describing how models can convert narrative reports into structured data (e.g., IOCs and relationships) and discussing evaluation tradeoffs; this is adjacent AI-in-security content but not part of the Kali local pentesting stack or its implementation details.
Jun 29, 2026
Recent advancements in AI-driven penetration testing have led to the development and deployment of tools that can autonomously discover and exploit vulnerabilities in web applications. One such tool, Shannon, leverages Anthropic’s Claude Agent SDK to perform comprehensive white-box analysis, autonomously identifying attack paths and executing real browser-based exploits. Shannon has demonstrated performance surpassing human pentesters on industry benchmarks, providing detailed, low-noise reports and simulating the workflows of experienced security engineers. In parallel, practitioners are exploring orchestration techniques to integrate AI models and penetration testing frameworks across different environments. A practical setup involves running large language models on an Ubuntu host and orchestrating the HexStrike penetration testing tool on a Kali Linux virtual machine, bridged via SSH. This configuration enables local AI models to automate and drive penetration testing tasks, with considerations for model performance and the potential need to scale to GPU or cloud-based solutions for more demanding scenarios.
Jun 29, 2026