yohannesgk/mini-kali-slim repository overview

This image provides penetration testing tools served with fastapi. All tools are designed for non-interactive, stdin/stdout execution—ideal for AI agents.

⁠Reconnaissance Tools

Build the attack surface map through passive and active information gathering.

⁠Scanning & Enumeration

Deep dive into discovered targets to identify services and vulnerabilities.

⁠Vulnerability Analysis

Map services to known vulnerabilities and assess security risks.

⁠Exploitation Tools

Execute controlled exploits and validate vulnerabilities.

⁠Post-Exploitation

Assess impact and identify pivot opportunities after successful exploitation.

⁠General Utilities

Support tools for various tasks.

⁠Usage

⁠Pull the Image

docker pull yohannesgk/mini-kali-slim:latest

This fetches the image from Docker Hub so you can run it locally or in any environment with Docker.

⁠Run With docker run

Start a container exposing the FastAPI server port (9756):

docker run -d \
  --name mini-kali-slim \
  -p 9756:9756 \
  yohannesgk/mini-kali-slim:latest

Now the API is reachable at:

http://localhost:9756

You can explore the docs:

http://localhost:9756/docs

⁠Docker Compose

If you want to manage this service alongside others or make your life easier with a simple up/down command, here’s a docker-compose.yml snippet:

version: "3.9"

services:
  mini-kali-slim:
    image: yohannesgk/mini-kali-slim:latest
    container_name: shell-executor
    ports:
      - "9756:9756"
    restart: unless-stopped

⁠Start the stack

docker compose up -d

⁠Stop the stack

docker compose down

Compose makes it super easy to add dependencies later (databases, LLM servers, etc.) without rewriting run commands.

⁠API Quick Usage

⁠Health Check

curl http://localhost:9756/health

Returns something like:

{"status":"healthy","service":"shell-executor"}

⁠Execute a Shell Command

⁠String format

curl -X POST http://localhost:9756/exec \
     -H "Content-Type: application/json" \
     -d '{"cmd": "ls -la /"}'

⁠List format

curl -X POST http://localhost:9756/exec \
     -H "Content-Type: application/json" \
     -d '{"cmd": ["nmap","-p","80","example.com"]}'

Response format

{
  "stdout": "...",
  "stderr": "",
  "returncode": 0
}

⁠Helpful Tips

Since this image is Kali-based and exposes shell execution over HTTP:

• Secure it before production — consider API keys, token auth, or a reverse proxy with authentication.
• Limit exposed commands if used in untrusted contexts.
• Compose networks make integration with other containers (like LLM servers or dashboards) seamless.