{"repo":"0x4m4/hexstrike-ai","free":true,"listed":false,"github":"https://github.com/0x4m4/hexstrike-ai","clone":"git clone https://github.com/0x4m4/hexstrike-ai.git","description":"HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.","language":"Python","stars":11087,"topics":["0x4m4","ai","ai-agents","ai-cybersecurity","ai-hacking","ai-penetration-testing","ai-security-tool","artificial-intelligence","ctf-tools","generative-ai","hexstrike","kali-linux","kali-tools","llm","llm-integration","mcp","mcp-server","mcp-tools","pentesting","pentesting-tools"],"license":"MIT","category":"cybersecurity_automation","readme_excerpt":"
\n\n\"HexStrike\n\n# HexStrike AI MCP Agents v6.0\n### AI-Powered MCP Cybersecurity Automation Platform\n\n[![Python](https://img.shields.io/badge/Python-3.8%2B-blue.svg)](https://www.python.org/)\n[![License](https://img.shields.io/badge/License-MIT-green.svg)](LICENSE)\n[![Security](https://img.shields.io/badge/Security-Penetration%20Testing-red.svg)](https://github.com/0x4m4/hexstrike-ai)\n[![MCP](https://img.shields.io/badge/MCP-Compatible-purple.svg)](https://github.com/0x4m4/hexstrike-ai)\n[![Version](https://img.shields.io/badge/Version-6.0.0-orange.svg)](https://github.com/0x4m4/hexstrike-ai/releases)\n[![Tools](https://img.shields.io/badge/Security%20Tools-150%2B-brightgreen.svg)](https://github.com/0x4m4/hexstrike-ai)\n[![Agents](https://img.shields.io/badge/AI%20Agents-12%2B-purple.svg)](https://github.com/0x4m4/hexstrike-ai)\n[![Stars](https://img.shields.io/github/stars/0x4m4/hexstrike-ai?style=social)](https://github.com/0x4m4/hexstrike-ai)\n\n**Advanced AI-powered penetration testing MCP framework with 150+ security tools and 12+ autonomous AI agents**\n\n**Owned & developed by [OTT Cybersecurity LLC](https://overthetop.ae/)**\n\n[📋 What's New](#whats-new-in-v60) • [🏗️ Architecture](#architecture-overview) • [🚀 Installation](#installation) • [🛠️ Features](#features) • [🤖 AI Agents](#ai-agents) • [📡 API Reference](#api-reference)\n\n
\n\n---\n\n
\n\n## Follow Our Social Accounts\n\n

\n \n \"Join\n \n   \n \n \"Follow\n \n

\n\n\n\n
\n\n---\n\n## Architecture Overview\n\nHexStrike AI MCP v6.0 features a multi-agent architecture with autonomous AI agents, intelligent decision-making, and vulnerability intelligence.\n\n```mermaid\n%%{init: {\"themeVariables\": {\n \"primaryColor\": \"#b71c1c\",\n \"secondaryColor\": \"#ff5252\",\n \"tertiaryColor\": \"#ff8a80\",\n \"background\": \"#2d0000\",\n \"edgeLabelBackground\":\"#b71c1c\",\n \"fontFamily\": \"monospace\",\n \"fontSize\": \"16px\",\n \"fontColor\": \"#fffde7\",\n \"nodeTextColor\": \"#fffde7\"\n}}}%%\ngraph TD\n A[AI Agent - Claude/GPT/Copilot] -->|MCP Protocol| B[HexStrike MCP Server v6.0]\n \n B --> C[Intelligent Decision Engine]\n B --> D[12+ Autonomous AI Agents]\n B --> E[Modern Visual Engine]\n \n C --> F[Tool Selection AI]\n C --> G[Parameter Optimization]\n C --> H[Attack Chain Discovery]\n \n D --> I[BugBounty Agent]\n D --> J[CTF Solver Agent]\n D --> K[CVE Intelligence Agent]\n D --> L[Exploit Generator Agent]\n \n E --> M[Real-time Dashboards]\n E --> N[Progress Visualization]\n E --> O[Vulnerability Cards]\n \n B --> P[150+ Security Tools]\n P --> Q[Network Tools - 25+]\n P --> R[Web App Tools - 40+]\n P --> S[Cloud Tools - 20+]\n P --> T[Binary Tools - 25+]\n P --> U[CTF Tools - 20+]\n P --> V[OSINT Tools - 20+]\n \n B --> W[Advanced Process Management]\n W --> X[Smart Caching]\n W --> Y[Resource Optimization]\n W --> Z[Error Recovery]\n \n style A fill:#b71c1c,stroke:#ff5252,stroke-width:3px,color:#fffde7\n style B fill:#ff5252,stroke:#b71c1c,stroke-width:4px,color:#fffde7\n style C fill:#ff8a80,stroke:#b71c1c,stroke-width:2px,color:#fffde7\n style D fill:#ff8a80,stroke:#b71c1c,stroke-width:2px,color:#fffde7\n style E fill:#ff8a80,stroke:#b71c1c,stroke-width:2px,color:#fffde7\n```\n\n### How It Works\n\n1. **AI Agent Connection** - Claude, GPT, or other MCP-compatible agents connect via FastMCP protocol\n2. **Intelligent Analysis** - Decision engine analyzes targets and selects optimal testing strategies\n3. **Autonomous Execution** - AI agents execute comprehensive security assessments\n4. **Real-time Adaptation** - System adapts based on results and discovered vulnerabilities\n5. **Advanced Reporting** - Visual output with vulnerability cards and risk analysis\n\n---\n\n## Installation\n\n### Quick Setup to Run the hexstrike MCPs Server\n\n```bash\n# 1. Clone the repository\ngit clone https://github.com/0x4m4/hexstrike-ai.git\ncd hexstrike-ai\n\n# 2. Create virtual environment\npython3 -m venv hexstrike-env\nsource hexstrike-env/bin/activate # Linux/Mac\n# hexstrike-env\\Scripts\\activate # Windows\n\n# 3. Install Python dependencies\npip3 install -r requirements.txt\n\n```\n\n### Installation and Setting Up Guide for various AI Clients:\n\n#### Installation & Demo Video\n\nWatch the full installation and setup walkthrough here: [YouTube - HexStrike AI Installation & Demo](https://www.youtube.com/watch?v=pSoftCagCm8)\n\n#### Supported AI Clients for Running & Integration\n\nYou can install and run HexStrike AI MCPs with various AI clients, including:\n\n- **5ire (Latest version v0.14.0 not supported for now)**\n- **VS Code Copilot**\n- **Roo Code**\n- **Cursor**\n- **Claude Desktop**\n- **Any MCP-compatible agent**\n\nRefer to the video above for step-by-step instructions and integration examples for these platforms.\n\n\n\n### Install Security Tools\n\n**Core Tools (Essential):**\n```bash\n# Network & Reconnaissance\nnmap masscan rustscan amass subfinder nuclei fierce dnsenum\nautorecon theharvester responder netexec enum4linux-ng\n\n# Web Application Security\ngobuster feroxbuster dirsearch ffuf dirb httpx katana\nnikto sqlmap wpscan arjun paramspider dalfox wafw00f\n\n# Password & Authentication\nhydra john hashcat medusa patator crackmapexec\nevil-winrm hash-identifier ophcrack\n\n# Binary Analysis & Reverse Engineering\ngdb radare2 binwalk ghidra checksec strings objdump\nvolatility3 foremost steghide exiftool\n```\n\n**Cloud Security Tools:**\n```bash\nprowler scout-suite trivy\nkube-hunter kube-bench docker-bench-security\n```\n\n**Browser Agent Requirements:**\n```bash\n# Chrome/Chromium for Browser Agent\nsudo apt install chromium-browser chromium-chromedriver\n# OR install Google Chrome\nwget -q -O - https://dl.google.com/linux/linux_signing_key.pub | sudo apt-key add -\necho \"deb [arch=amd64] http://dl.google.com/linux/chrome/deb/ stable main\" | sudo tee /etc/apt/sources.list.d/google-chrome.list\nsudo apt update && sudo apt install google-chrome-stable\n```\n\n### Start the Server\n\n```bash\n# Start the MCP server\npython3 hexstrike_server.py\n\n# Optional: Start with debug mode\npython3 hexstrike_server.py --debug\n\n# Optional: Custom port configuration\npython3 hexstrike_server.py --port 8888\n```\n\n### Verify Installation\n\n```bash\n# Test server health\ncurl http://localhost:8888/health\n\n# Test AI agent capabilities\ncurl -X POST http://localhost:8888/api/intelligence/analyze-target \\\n -H \"Content-Type: application/json\" \\\n -d '{\"target\": \"example.com\", \"analysis_type\": \"comprehensive\"}'\n```\n\n---\n\n## AI Client Integration Setup\n\n### Claude Desktop Integration or Cursor\n\nEdit `~/.config/Claude/claude_desktop_config.json`:\n```json\n{\n \"mcpServers\": {\n \"hexstrike-ai\": {\n \"command\": \"python3\",\n \"args\": [\n \"/path/to/hexstrike-ai/hexstrike_mcp.py\",\n \"--server\",\n \"http://localhost:8888\"\n ],\n \"description\": \"HexStrike AI v6.0 - Advanced Cybersecurity Automation Platform\",\n \"timeout\": 300,\n \"disabled\": false\n }\n }\n}\n```\n\n### VS Code Copilot Integration\n\nConfigure VS Code settings in `.vscode/settings.json`:\n```json\n{\n \"servers\": {\n \"hexstrike\": {\n \"type\": \"stdio\",\n \"command\": \"python3\",\n \"args\": [\n \"/path/to/hexstrike-ai/hexstrike_mcp.py\",\n \"--server\",\n \"http://localhost:8888\"\n ]\n }\n },\n \"inputs\": []\n}\n```\n\n---\n\n## Features\n\n### Security Tools Arsenal\n\n**150+ Professional Security Tools:**\n\n
\n🔍 Network Reconnaissance & Scanning (25+ Tools)\n\n- **Nmap** - Advanced port scanning with custom NSE scripts and service detection\n- **Rustscan** - Ultra-fast port scanner with intelligent rate limiting\n- **Masscan** - High-speed Internet-scale port scanning with banner grabbing\n- **AutoRecon** - Comprehensive automated reconnaissance with 35+ parameters\n- **Amass** - Advanced subdomain enumeration and OSINT gathering\n- **Subfinder** - Fast passive subdomain discovery with multiple sources\n- **Fierce** - DNS reconnaissance and zone transfer testing\n- **DNSEnum** - DNS information gathering and subdomain brute forcing\n- **TheHarvester** - Email and subdomain harvesting from multiple sources\n- **ARP-Scan** - Network discovery using ARP requests\n- **NBTScan** - NetBIOS name scanning and enumeration\n- **RPCClient** - RPC enumeration and null session testing\n- **Enum4linux** - SMB enumeration with user, group, and share discovery\n- **Enum4linux-ng** - Advanced SMB enumeration with enhanced logging\n- **SMBMap** - SMB share enumeration and exploitation\n- **Responder** - LLMNR, NBT-NS and MDNS poisoner for credential harvesting\n- **NetExec** - Network service exploitation framework (formerly CrackMapExec)\n\n
\n\n
\n🌐 Web Application Security Testing (40+ Tools)\n\n- **Gobuster** - Directory, file, and DNS enumeration with intelligent wordlists\n- **Dirsearch** - Advanced directory and file discovery with enhanced logging\n- **Feroxbuster** - Recursive content discovery with intelligent filtering\n- **FFuf** - Fast web fuzzer with advanced filtering and parameter discovery\n- **Dirb** - Comprehensive web content scanner with recursive scanning\n- **HTTPx** - Fast HTTP probing and technology detection\n- **Katana** - Next-generation crawling and spidering with JavaScript support\n- **Hakrawler** - Fast web endpoint discovery and crawling\n- **Gau** - Get All URLs from multiple sources (Wayback, Common Crawl, etc.)\n- **Waybackurls** - Historical URL discovery from Wayback Machine\n- **Nuclei** - Fast vulnerability scanner with 4000+ templates\n- **","default_branch":"master","files":14,"tree":["LICENSE","README.md","assets/hexstrike-logo.png","assets/leaksapi-banner.png","assets/leaksapi-logo.png","assets/ott-logo.png","assets/usage_input.png","assets/usage_output.png","assets/usage_server1.png","assets/usage_server2.png","hexstrike-ai-mcp.json","hexstrike_mcp.py","hexstrike_server.py","requirements.txt"],"storefront":"/r/0x4m4","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/0x4m4/hexstrike-ai/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}