Kaiju

🥊 Why KAIJU

“If we can't make it better than the others, we make it have something the others don't have.”

KAIJU ships four things nobody else does: the payload library as a tool, the embedded AI brain, the paste-and-go wizard, and the cockpit.

🚀 Installation

git clone https://github.com/Anonymous-beta/kaiju.git
cd kaiju
python3 -m venv .venv && source .venv/bin/activate
pip install -e .
kaiju banner

pip install -r requirements.txt
python3 run.py            # splash + help
python3 run.py run        # fire up the MCP server

kaiju banner              # the beast wakes up
kaiju tools               # list the full arsenal
kaiju config --ai         # paste your AI API key
kaiju run                 # start the MCP server (stdio)

🎯 Quick Start

# 1. Configure the AI (paste your key — done in ~30 seconds)
kaiju config --ai

# 2. Fire up the server (stdio for Claude Desktop / Cursor)
kaiju run

# 3. Or go interactive — the cockpit
kaiju tui

🤖 AI Configuration — paste & go

kaiju config --ai

The wizard asks for a provider, you paste your API key, it tests the connection, and done. KAIJU connects instantly.

💡 Local Ollama with no key works too — KAIJU is fully offline-capable.

🔌 Connecting MCP Clients

Edit ~/.config/Claude/claude_desktop_config.json:

{
  "mcpServers": {
    "kaiju": {
      "command": "kaiju",
      "args": ["run"]
    }
  }
}

{
  "mcpServers": {
    "kaiju": {
      "command": "kaiju",
      "args": ["run"]
    }
  }
}

kaiju run --transport sse --host 127.0.0.1 --port 8765

# examples/kaiju_sse_client.py
import asyncio
from mcp import ClientSession
from mcp.client.sse import sse_client

async def main():
    async with sse_client("http://127.0.0.1:8765/sse") as (read, write):
        async with ClientSession(read, write) as session:
            await session.initialize()
            tools = await session.list_tools()
            print(f"⚡ KAIJU connected — {len(tools.tools)} tools armed")

asyncio.run(main())

🛠️ The Arsenal — 25 tools

recon — know your enemy

network — map the battlefield

web — eat the web

exploit — the teeth

system — local power (safe by default)

ai — the brain

💣 The Payload Library

11 categories, 100+ payloads, browsable via the payload_library MCP tool:

sqli, xss, lfi, rce, ssrf, idor, auth, headers,
deserialization, upload, crypto, misc

Example MCP call:

payload_library("ssrf")

[ssrf]
  • Localhost: http://127.0.0.1/
  • Localhost hex: http://0x7f000001/
  • IPv6 loopback: http://[::1]/
  • AWS metadata: http://169.254.169.254/latest/meta-data/
  • gopher: gopher://127.0.0.1:6379/_INFO
  • dict: dict://127.0.0.1:11211/info
  ...

🛡️ Safe Mode

KAIJU ships with safe_mode: true:

• command_exec only runs allowlisted binaries (nmap, curl, dig, …) — no shell metacharacters, no rm, mkfs, dd, etc.
• interpreted shells (bash -c, python3 -c) are blocked
• file_read / file_write restricted to the working tree
• exploit checks are non-invasive probes (single benign request)

Run KAIJU on a box you own and disable it when you're ready to go full monster:

kaiju config --set 'safe_mode false'

🕹️ CLI Reference

🗂️ Project Structure

kaiju/
├── run.py                     # zero-install launcher
├── setup.py / pyproject.toml  # packaging
├── assets/kaiju-logo.png      # the logo
├── examples/                  # client configs + SSE demo
└── kaiju/
    ├── banner.py              # the Kaiju splash
    ├── timestamps.py          # signature timestamps
    ├── config.py              # XDG config + providers
    ├── ai.py                  # OpenAI-compatible AI client
    ├── server.py              # MCP server core
    ├── cli.py                 # CLI entry
    ├── tools/                 # the arsenal
    │   ├── recon.py  network.py  web.py  exploit.py  system.py
    └── ui/tui.py              # interactive cockpit

🗺️ Roadmap

• More payloads (every category, 500+)
• Metasploit bridge
• Session / report export (JSON, HTML, markdown)
• Windows client (cockpit only)
• Plugin system

📜 License

MIT — Copyright © 2026 Anonymous-beta.