⚠️ Malware / Trojaner / VirenGuardBreaker: Derailing AI-assisted malware analysis with a code comment(10.09.2026 um 11:00 Uhr)
⚠️ Malware / Trojaner / VirenAttack hides malware in PNGs and drops custom reverse tunnel on victims' machines(31.08.2026 um 20:26 Uhr)
⚠️ Malware / Trojaner / Viren33-hour BGP hijack of Softaculous traffic prompts security scramble(01.09.2026 um 14:04 Uhr)
🕵️ SicherheitslückenProlific Microsoft 0-day hunter drops CrowdStrike Falcon exploit PoC(03.09.2026 um 20:08 Uhr)
🔧 AI Nachrichten OpenAI commits $1B in AI credits to frontline cyber defenders(04.09.2026 um 01:47 Uhr)
⚠️ Malware / Trojaner / VirenGuardBreaker: Derailing AI-assisted malware analysis with a code comment(10.09.2026 um 11:00 Uhr)
⚠️ Malware / Trojaner / VirenAttack hides malware in PNGs and drops custom reverse tunnel on victims' machines(31.08.2026 um 20:26 Uhr)
⚠️ Malware / Trojaner / Viren33-hour BGP hijack of Softaculous traffic prompts security scramble(01.09.2026 um 14:04 Uhr)
🕵️ SicherheitslückenProlific Microsoft 0-day hunter drops CrowdStrike Falcon exploit PoC(03.09.2026 um 20:08 Uhr)
🔧 AI Nachrichten OpenAI commits $1B in AI credits to frontline cyber defenders(04.09.2026 um 01:47 Uhr)

💾 Tools 🕛 vor 6 Monaten 10 Min Lesezeit
0

Kali & LLM: macOS with Claude Desktop GUI & Anthropic Sonnet LLM

↗ Quelle (kali.org)
🗣️ Stimme:
📑 Inhaltsübersicht

This post will focus on an alternative method of using Kali Linux, moving beyond direct terminal command execution. Instead, we will leverage a Large Language Model (LLM) to translate “natural language” descriptions of desired actions into technical commands. Achieving this setup requires the integration of three distinct systems:



  • UI: Apple’s macOS (Can also use Microsoft Windows, but not covered in this guide) - with Claude Desktop

  • Attacking box: Kali Linux - using various tools

  • LLM: In the cloud - Anthropic’s Sonnet 4.5




The LLM is only part of the story. When paired with Model Context Protocol (MCP)’s, it allows/enables the LLM to seamlessly connect with external sources (data, programs/tools etc).
At a very high level:



  1. We can ask a LLM to-do a task via a “prompt”.



  • “Can you please port scan scanme.nmap.org, if you find a valid web server, check if security.txt exists”



  1. The LLM will understand what we asked it to-do.



  • “First task, I need to use Nmap/Network Mapper to-do a port scan of scan scanme.nmap.org



  1. LLM will then request the MCP to-do any action(s).



  • “Is Nmap installed? Can I access it?”



  1. MCP will run the request and return results



  • $ nmap scanme.nmap.org



  1. The LLM will process the results as well as showing it to us as end-users.



  • “I found that scanme.nmap.org is up, and contains a web server on port 80/TCP & 443/TCP.”



  1. If needed, could be a loop, and re-run a command/action again back in the MCP until the prompt has been completed/full-filled.



  • “Now I need see if /.well-known/security.txt gives HTTP 200 response”




Just like the joys of text editors wars (vim vs emacs vs nano), this is not to say its the “best” way to-do it. This is a way.

This scenario may work for you, or it may not be acceptable to you (e.g. privacy). That is fine.





If you are wonder “Why this setup? Why are you using multiple OSes?”, there are various reasons why!



  • You may want a graphical user interface (GUI), which Claude Desktop is.

    • Its an official product from Anthropic, who is making the model we want to run. However Claude Desktop is not officially supported on Linux.

    • There are workarounds (e.g. , as well as other solutions, such as ,



  • It being “free”.

    • At the time of writing, 2026-01



  • Speed

    • Having Kali running in “the cloud”, may have greater network connection , or be closer to your target - thus speeding things up!




SSH


We are going to want our macOS box, to be able to talk/interact/communicate to Kali.
For this, we will use SSH.


Kali Setup


First up, Kali.
If you are using Kali in the cloud, you likely already have SSH pre-setup.
If SSH is not setup, let’s quickly install and run:


CONSOLE
$ sudo apt update
[...]
$
$ sudo apt install -y openssh-server
[...]
$
$ sudo systemctl enable --now ssh
[...]
$

macOS


Switching over to our macOS machine, open up Terminal (or similar program), and either find out public SSH key or generate one:


CONSOLE
user@Users-MacBook-Pro ~ % ls -lah .ssh
ls: .ssh: No such file or directory
user@Users-MacBook-Pro ~ %

This is a clean install, so we will be generating a new key.




Generating a new SSH key, is the same steps as doing it on Linux:


CONSOLE
user@Users-MacBook-Pro ~ % ssh-keygen
Generating public/private ed25519 key pair.
Enter file in which to save the key (/Users/user/.ssh/id_ed25519):
Created directory '/Users/user/.ssh'.
Enter passphrase for "/Users/user/.ssh/id_ed25519" (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /Users/user/.ssh/id_ed25519
Your public key has been saved in /Users/user/.ssh/id_ed25519.pub
The key fingerprint is:
SHA256:9JWMFmD6Jhq9gSLVrWSQaqR0hOOfGC5wd/HoMW1CoKU [email protected]
The key's randomart image is:
+--[ED25519 256]--+
| +oo. o.. |
| =.B .oo + . |
|=.E +.o=. o + |
|+=.o.+*o+o . |
|=.=.=o+=S . |
|.+ + o.= |
|. . . |
| |
| |
+----[SHA256]-----+
user@Users-MacBook-Pro ~ %
user@Users-MacBook-Pro ~ % cat ~/.ssh/id_ed25519.pub
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFVZPT158E6mNNGrtOXTBQtK/7sXj09gRGZjkyMt82hs [email protected]
user@Users-MacBook-Pro ~ %

Password is not shown




Now, lets add that public SSH key from macOS to Kali, allowing for key authentication.
Our Kali is located at 192.168.1.30, change the IP to match your setup:


CONSOLE
user@Users-MacBook-Pro ~ % ssh-copy-id [email protected]
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: "/Users/user/.ssh/id_ed25519.pub"
The authenticity of host '192.168.1.30 (192.168.1.30)' can't be established.
ED25519 key fingerprint is SHA256:s1EHXZomZxup5ybdUSgTJwnyjwrMBxFSmAgt4+ijhws.
This key is not known by any other names.
Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
[email protected]'s password:
Number of key(s) added: 1
Now try logging into the machine, with: "ssh '[email protected]'"
and check to make sure that only the key(s) you wanted were added.
user@Users-MacBook-Pro ~ %

Password is not shown


This hopefully will be the last time you need to type in your Kali password when connecting via SSH!




Testing


Finally, let’s test it out:


CONSOLE
user@Users-MacBook-Pro ~ % ssh [email protected]
Linux kali 6.16.8+kali-amd64 #1 SMP PREEMPT_DYNAMIC Kali 6.16.8-1kali1 (2025-09-24) x86_64
The programs included with the Kali GNU/Linux system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.
Kali GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
permitted by applicable law.
Last login: Wed Jan 21 13:47:48 2026 from 192.168.30.153
┏━(Message from Kali developers)

┃ This is a minimal installation of Kali Linux, you likely
┃ want to install supplementary tools. Learn how:
┃ ⇒ https://www.kali.org/docs/troubleshooting/common-minimum-setup/

┗━(Run: “touch ~/.hushlogin” to hide this message)
┌──(kali㉿kali)-[~]
└─$

Please replace 192.168.1.30 with YOUR Kali IP address.


Boom!


MCP Server (MCP Kali Server)


Now that we have a console on Kali, let’s continue our MCP server setup. There are many of MCP server options out there already with more being created every day.
We will be using , , , without any tools pre-installed, which is why this happened.


Claude Desktop


Time to switch machines, and on macOS, download (At the time of writing (2026-01-21), latest version v1.1.381-c2a39e)


Afterwards, open Claude.dmg and copy Claude.app into Applications before running it.




If you are using Microsoft Windows, setup should be similar, but it is out of scope for this post.









At the time of writing (2026-01), Claude Desktop is on Apple macOS and Microsoft Windows. There is not an official Linux build.



Others have reported that using - You do you (and at your own risk!)



Using Claude Code, requires a API key, which at the time of writing, does not have a free-tier option.





MCP Client (Claude Desktop)


With all that out of the way, we need to setup Claude Desktop’s MCP client.






Open/edit the file using your text editor of choice, and paste in:


JSON
{
"mcpServers": {
"mcp-kali-server": {
"command": "ssh",
"args": [
"[email protected]",
"mcp-server"
],
"transport": "stdio"
}
}
}

Please replace 192.168.1.30 with YOUR Kali IP address as before.


So for us, it looks like:


CONSOLE
user@Users-MacBook-Pro ~ % cat /Users/user/Library/Application\ Support/Claude/claude_desktop_config.json | jq
{
"preferences": {
"quickEntryShortcut": "off",
"menuBarEnabled": false
},
"mcpServers": {
"mcp-kali-server": {
"command": "ssh",
"args": [
"-i",
"/Users/user/.ssh/id_ed25519",
"[email protected]",
"mcp-server"
],
"transport": "stdio"
}
}
}
user@Users-MacBook-Pro ~ %



Finally restart Claude Desktop by quitting and re-opening for our settings to take affect.








Claude will check if we trust the MCP, and if we wish to run commands.






If you are impatient, you can peek behind the curtain a little bit by checking the logs!
In the terminal which we ran kali-server-mcp, we can then see:


CONSOLE
2026-01-21 14:20:21,688 [INFO] Executing command: which nmap
2026-01-21 14:20:21,690 [INFO] Executing command: which gobuster
2026-01-21 14:20:21,692 [INFO] Executing command: which dirb
2026-01-21 14:20:21,693 [INFO] Executing command: which nikto
2026-01-21 14:20:21,695 [INFO] 127.0.0.1 - - [21/Jan/2026 14:20:21] "GET /health HTTP/1.1" 200 -
2026-01-21 14:21:25,385 [INFO] Executing command: nmap -sV scanme.nmap.org
2026-01-21 14:21:39,295 [INFO] 127.0.0.1 - - [21/Jan/2026 14:21:39] "POST /api/tools/nmap HTTP/1.1" 200 -


Vollständiger Original-Bericht
Ausführliche Details, Code-Beispiele & Hersteller-Stellungnahme auf kali.org.
↗ Original-Artikel auf kali.org lesen
Wie bewertest du diesen Beitrag?
1 Klick Feedback
Teilen mit Netzwerk & Team:

Community-Analysen & Experten-Meinungen 0

Verfasse deine eigene Analyse, teile Workarounds oder diskutiere diesen Vorfall im Blog.
Noch keine Community-Analyse verfasst. Markiere einen Textabschnitt oder klicke oben auf Eigene Analyse verfassen“!
Community Pulse: Relevanz-Einschätzung
1 Klick Experten-Votum
🔴 Akute Relevanz 0%
🟡 In Evaluierung 0%
🟢 Keine Auswirkung 0%
Spannende Innovation 0%
Verwandte Story-Cluster & Quellen (Vektor-KI)
Port 8095 Engine
1 Quelle
GuardBreaker: Derailing AI-assisted malware analysis with a code comment
1 Quelle
Attack hides malware in PNGs and drops custom reverse tunnel on victims' machines
1 Quelle
33-hour BGP hijack of Softaculous traffic prompts security scramble
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten Kali & LLM: macOS with Claude Desktop GUI & Anthropic Sonnet LLM

Thematisch verwandte Begriffe: Kali, macOS, with, Claude · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...