An AI-powered penetration testing agent built on Kali Linux, mastering all 518 security tools through continuous self-directed learning.

kali-claw is a self-evolving security agent from the OpenClaw project. It operates 24/7 on Kali Linux, systematically learning and practicing penetration testing across 83 security domains. It thinks like a hacker — first principles, divergent thinking, assume breach — and acts like a senior engineer: direct, hands-on, results-driven.

• 83 Security Skill Domains — From OSINT and web exploitation to cloud security, AI/LLM security (incl. dedicated LLM red team), exploit development, hardware/embedded systems, Bluetooth/RFID/NFC, SCADA/ICS, firmware reverse engineering, VoIP/SIP, database attacks, Active Directory/LDAP attacks, anti-forensics, username-based OSINT dossier generation (Maigret), dark-web intelligence, threat hunting + defensive deception (honeypots), blockchain/Web3 security, payment security (PCI-DSS), Kubernetes red team, and secret-management attack (SAST/secrets), each with structured payloads, test cases, and learning guides
• 12 Hacker Laws — Core behavioral guidelines derived from real-world security philosophy
• Layered Memory System — Daily logs + distilled long-term memory + monthly chronicles for persistent knowledge across sessions
• Heartbeat Task Framework — Automated health checks, security scans, learning progress tracking, and knowledge maintenance
• Fully Reusable — Copy the workspace, change 4 files, and you have a new security agent

kali-claw is a portable skill package — you can use it with multiple AI agent platforms:

New to OpenClaw? Start with the usage guide — it covers everything from installation to your first penetration test.

• OpenClaw installed and configured
• Recommended: Kali Linux environment — either install OpenClaw directly on Kali Linux, or provide SSH access from your OpenClaw host to a Kali Linux machine so kali-claw can execute security tools remotely

npm install -g openclaw@latest

See the official documentation for detailed installation and configuration options.

It is not recommended to use the main agent directly. Create a dedicated agent for this workspace:

openclaw agents add kali-claw --workspace ~/.openclaw/workspace-kali-claw

This creates an isolated agent with its own workspace, auth, and routing. See openclaw agents for full options including --model, --bind, and --non-interactive.

cd ~/.openclaw/workspace-kali-claw/
git clone https://github.com/<repo-path>.git .

The agent will automatically read SOUL.md, AGENTS.md, USER.md, and MEMORY.md on startup to initialize its identity and context.

openclaw gateway start

Then interact with kali-claw:

> Scan target 192.168.1.100 with nmap for open ports and services
> Teach me how SQL injection works with hands-on examples
> Run an OSINT reconnaissance on example.com

kali-claw/
├── SOUL.md              # Identity + 12 Hacker Laws (the agent's personality)
├── AGENTS.md            # Workspace config + session startup sequence
├── IDENTITY.md          # Skill tags + personality traits
├── USER.md              # Captain (user) profile
├── MEMORY.md            # Long-term distilled knowledge
├── TOOLS.md             # Tool quick reference + learning progress
├── HEARTBEAT.md         # Periodic heartbeat task framework
├── skills/              # 83 security skill domains
│   ├── api-security/
│   │   ├── SKILL.md         # Skill definition + use cases
│   │   ├── payloads.md      # Attack payloads
│   │   ├── test-cases.md    # Structured test cases
│   │   └── guides/          # Deep-dive learning guides
│   ├── web-sqli/
│   ├── web-xss/
│   ├── cloud-security/
│   └── ... (83 domains total)
├── memory/              # Daily memory logs (YYYY-MM-DD.md)
├── chronicle/           # Monthly chronicle of major events
├── bak/                 # Automatic backups
└── README.md            # This file

Every time the agent starts a new session:

1. Read SOUL.md — Load identity and hacker laws
2. Read USER.md — Understand who it's helping
3. Read recent memory — Get context from today and yesterday
4. Read MEMORY.md — Load long-term distilled knowledge

The agent wakes up fresh each session but carries continuity through its file-based memory system.

Knowledge flows upward: daily logs are regularly distilled into MEMORY.md, and major milestones are recorded in the chronicle.

37 domains organized by the OWASP and MITRE frameworks + 12 additional domains (knowledge operations, AI/LLM, hardware, multi-agent, MCP, bounty hunting, etc.) + 23 expanded domains (exploit development, privilege escalation, payload generation, AV/EDR evasion, DNS attacks, web XXE, file inclusion, CMS attack, steganography, network sniffing & MITM, Bluetooth/RFID/NFC, network tunneling & proxy, firmware reverse, SCADA/ICS security, database attack, VoIP/SIP attack, anti-forensics, pentest reporting, engagement manager, tool mastery, AD/LDAP attack, web deserialization, email protocol attack):

Each skill contains:

• SKILL.md — Description, use cases, tools, and workflow
• payloads.md — Curated attack payloads and testing commands
• test-cases.md — Structured test cases with steps and expected results
• guides/ — Deep-dive learning guides with hands-on exercises

These laws define how kali-claw thinks and acts:

1. First Principles Thinking — Reason from fundamental facts, not tools or assumptions
2. Divergent Thinking First — Always consider 3+ approaches before choosing
3. Minimize Attack Surface — Less exposure = less risk
4. Defense in Depth — Never rely on a single security layer
5. Least Privilege — Grant only necessary access
6. Assume Breach — Design as if the attacker is already inside
7. Obscurity Is Not Security — Security through design, not hiding
8. Trust but Verify — Validate all inputs unconditionally
9. Information Wants to Be Free — Share knowledge, protect sensitive data
10. Skill Over Credentials — Judge by capability, not title
11. The Weakest Link Is Human — Always consider the human factor
12. Murphy's Security Law — If it can be exploited, it will be

To create a different security agent based on this workspace:

cp -r kali-claw/ <new-agent-name>/
cd <new-agent-name>/

rm -f memory/*.md memory/alerts.txt
rm -rf chronicle/

The following are universal and reusable as-is:

• Hacker Laws in SOUL.md — applies to all security agents
• Heartbeat framework in HEARTBEAT.md
• All 83 skills in skills/
• All guides in skills/*/guides/

AGENTS.md:
  Agent Name: web-hunter
  Role: Web Security Researcher
  Specialty: Web penetration testing + vulnerability discovery

IDENTITY.md:
  Name: web-hunter
  Skill tags: Keep Web Security rows, simplify others

SOUL.md:
  Nickname: web-hunter
  Keep hacker laws unchanged

AGENTS.md:
  Agent Name: cloud-sentinel
  Role: Cloud Security Auditor
  Specialty: AWS/Azure/GCP security + Container security

IDENTITY.md:
  Name: cloud-sentinel
  Skill tags: Focus on cloud security and container security

TOOLS.md:
  Core tools: pacu, scoutsuite, kubeaudit, trivy

Average score: 87.81 | 82/83 scored Excellent or above | 19 Distinguished | 83 total skill domains

Built with the OpenClaw Agent Framework.