Hexstrike Ai

HexStrike AI MCP Agents v6.0

AI-Powered MCP Cybersecurity Automation Platform

[](https://www.python.org/) [](LICENSE) [](https://github.com/0x4m4/hexstrike-ai) [](https://github.com/0x4m4/hexstrike-ai) [](https://github.com/0x4m4/hexstrike-ai/releases) [](https://github.com/0x4m4/hexstrike-ai) [](https://github.com/0x4m4/hexstrike-ai) [](https://github.com/0x4m4/hexstrike-ai)

Advanced AI-powered penetration testing MCP framework with 150+ security tools and 12+ autonomous AI agents

[📋 What's New](#whats-new-in-v60) • [🏗️ Architecture](#architecture-overview) • [🚀 Installation](#installation) • [🛠️ Features](#features) • [🤖 AI Agents](#ai-agents) • [📡 API Reference](#api-reference)

---

Follow Our Social Accounts

  

---

Architecture Overview

HexStrike AI MCP v6.0 features a multi-agent architecture with autonomous AI agents, intelligent decision-making, and vulnerability intelligence.

%%{init: {"themeVariables": {
  "primaryColor": "#b71c1c",
  "secondaryColor": "#ff5252",
  "tertiaryColor": "#ff8a80",
  "background": "#2d0000",
  "edgeLabelBackground":"#b71c1c",
  "fontFamily": "monospace",
  "fontSize": "16px",
  "fontColor": "#fffde7",
  "nodeTextColor": "#fffde7"
}}}%%
graph TD
    A[AI Agent - Claude/GPT/Copilot] -->|MCP Protocol| B[HexStrike MCP Server v6.0]
    
    B --> C[Intelligent Decision Engine]
    B --> D[12+ Autonomous AI Agents]
    B --> E[Modern Visual Engine]
    
    C --> F[Tool Selection AI]
    C --> G[Parameter Optimization]
    C --> H[Attack Chain Discovery]
    
    D --> I[BugBounty Agent]
    D --> J[CTF Solver Agent]
    D --> K[CVE Intelligence Agent]
    D --> L[Exploit Generator Agent]
    
    E --> M[Real-time Dashboards]
    E --> N[Progress Visualization]
    E --> O[Vulnerability Cards]
    
    B --> P[150+ Security Tools]
    P --> Q[Network Tools - 25+]
    P --> R[Web App Tools - 40+]
    P --> S[Cloud Tools - 20+]
    P --> T[Binary Tools - 25+]
    P --> U[CTF Tools - 20+]
    P --> V[OSINT Tools - 20+]
    
    B --> W[Advanced Process Management]
    W --> X[Smart Caching]
    W --> Y[Resource Optimization]
    W --> Z[Error Recovery]
    
    style A fill:#b71c1c,stroke:#ff5252,stroke-width:3px,color:#fffde7
    style B fill:#ff5252,stroke:#b71c1c,stroke-width:4px,color:#fffde7
    style C fill:#ff8a80,stroke:#b71c1c,stroke-width:2px,color:#fffde7
    style D fill:#ff8a80,stroke:#b71c1c,stroke-width:2px,color:#fffde7
    style E fill:#ff8a80,stroke:#b71c1c,stroke-width:2px,color:#fffde7

How It Works

1. AI Agent Connection - Claude, GPT, or other MCP-compatible agents connect via FastMCP protocol
2. Intelligent Analysis - Decision engine analyzes targets and selects optimal testing strategies
3. Autonomous Execution - AI agents execute comprehensive security assessments
4. Real-time Adaptation - System adapts based on results and discovered vulnerabilities
5. Advanced Reporting - Visual output with vulnerability cards and risk analysis

---

Installation

Quick Setup to Run the hexstrike MCPs Server

# 1. Clone the repository
git clone https://github.com/0x4m4/hexstrike-ai.git
cd hexstrike-ai

# 2. Create virtual environment
python3 -m venv hexstrike-env
source hexstrike-env/bin/activate  # Linux/Mac
# hexstrike-env\Scripts\activate   # Windows

# 3. Install Python dependencies
pip3 install -r requirements.txt

Installation and Setting Up Guide for various AI Clients:

Installation & Demo Video

Watch the full installation and setup walkthrough here: YouTube - HexStrike AI Installation & Demo

Supported AI Clients for Running & Integration

You can install and run HexStrike AI MCPs with various AI clients, including:

• 5ire (Latest version v0.14.0 not supported for now)
• VS Code Copilot
• Roo Code
• Cursor
• Claude Desktop
• Any MCP-compatible agent

Refer to the video above for step-by-step instructions and integration examples for these platforms.

Install Security Tools

Core Tools (Essential):

# Network & Reconnaissance
nmap masscan rustscan amass subfinder nuclei fierce dnsenum
autorecon theharvester responder netexec enum4linux-ng

# Web Application Security
gobuster feroxbuster dirsearch ffuf dirb httpx katana
nikto sqlmap wpscan arjun paramspider dalfox wafw00f

# Password & Authentication
hydra john hashcat medusa patator crackmapexec
evil-winrm hash-identifier ophcrack

# Binary Analysis & Reverse Engineering
gdb radare2 binwalk ghidra checksec strings objdump
volatility3 foremost steghide exiftool

Cloud Security Tools:

prowler scout-suite trivy
kube-hunter kube-bench docker-bench-security

Browser Agent Requirements:

# Chrome/Chromium for Browser Agent
sudo apt install chromium-browser chromium-chromedriver
# OR install Google Chrome
wget -q -O - https://dl.google.com/linux/linux_signing_key.pub | sudo apt-key add -
echo "deb [arch=amd64] http://dl.google.com/linux/chrome/deb/ stable main" | sudo tee /etc/apt/sources.list.d/google-chrome.list
sudo apt update && sudo apt install google-chrome-stable

Start the Server

# Start the MCP server
python3 hexstrike_server.py

# Optional: Start with debug mode
python3 hexstrike_server.py --debug

# Optional: Custom port configuration
python3 hexstrike_server.py --port 8888

Verify Installation

# Test server health
curl http://localhost:8888/health

# Test AI agent capabilities
curl -X POST http://localhost:8888/api/intelligence/analyze-target \
  -H "Content-Type: application/json" \
  -d '{"target": "example.com", "analysis_type": "comprehensive"}'

---

AI Client Integration Setup

Claude Desktop Integration or Cursor

Edit ~/.config/Claude/claude_desktop_config.json:

{
  "mcpServers": {
    "hexstrike-ai": {
      "command": "python3",
      "args": [
        "/path/to/hexstrike-ai/hexstrike_mcp.py",
        "--server",
        "http://localhost:8888"
      ],
      "description": "HexStrike AI v6.0 - Advanced Cybersecurity Automation Platform",
      "timeout": 300,
      "disabled": false
    }
  }
}

VS Code Copilot Integration

Configure VS Code settings in .vscode/settings.json:

{
  "servers": {
    "hexstrike": {
      "type": "stdio",
      "command": "python3",
      "args": [
        "/path/to/hexstrike-ai/hexstrike_mcp.py",
        "--server",
        "http://localhost:8888"
      ]
    }
  },
  "inputs": []
}

---

Features

Security Tools Arsenal

150+ Professional Security Tools:

🔍 Network Reconnaissance & Scanning (25+ Tools)

• Nmap - Advanced port scanning with custom NSE scripts and service detection
• Rustscan - Ultra-fast port scanner with intelligent rate limiting
• Masscan - High-speed Internet-scale port scanning with banner grabbing
• AutoRecon - Comprehensive automated reconnaissance with 35+ parameters
• Amass - Advanced subdomain enumeration and OSINT gathering
• Subfinder - Fast passive subdomain discovery with multiple sources
• Fierce - DNS reconnaissance and zone transfer testing
• DNSEnum - DNS information gathering and subdomain brute forcing
• TheHarvester - Email and subdomain harvesting from multiple sources
• ARP-Scan - Network discovery using ARP requests
• NBTScan - NetBIOS name scanning and enumeration
• RPCClient - RPC enumeration and null session testing
• Enum4linux - SMB enumeration with user, group, and share discovery
• Enum4linux-ng - Advanced SMB enumeration with enhanced logging
• SMBMap - SMB share enumeration and exploitation
• Responder - LLMNR, NBT-NS and MDNS poisoner for credential harvesting
• NetExec - Network service exploitation framework (formerly CrackMapExec)

🌐 Web Application Security Testing (40+ Tools)

• Gobuster - Directory, file, and DNS enumeration with intelligent wordlists
• Dirsearch - Advanced directory and file discovery with enhanced logging
• Feroxbuster - Recursive content discovery with intelligent filtering
• FFuf - Fast web fuzzer with advanced filtering and parameter discovery
• Dirb - Comprehensive web content scanner with recursive scanning
• HTTPx - Fast HTTP probing and technology detection
• Katana - Next-generation crawling and spidering with JavaScript support
• Hakrawler - Fast web endpoint discovery and crawling
• Gau - Get All URLs from multiple sources (Wayback, Common Crawl, etc.)
• Waybackurls - Historical URL discovery from Wayback Machine
• Nuclei - Fast vulnerability scanner with 4000+ templates
• Nikto - Web server vulnerability scanner with comprehensive checks
• SQLMap - Advanced automatic SQL injection testing with tamper scripts
• WPScan - WordPress security scanner with vulnerability database
• Arjun - HTTP parameter discovery with intelligent fuzzing
• ParamSpider - Parameter mining from web archives
• X8 - Hidden parameter discovery with advanced techniques
• Jaeles - Advanced vulnerability scanning with custom signatures
• Dalfox - Advanced XSS vulnerability scanning with DOM analysis
• Wafw00f - Web application firewall fingerprinting
• TestSSL - SSL/TLS configuration testing and vulnerability assessment
• SSLScan - SSL/TLS cipher suite enumeration
• SSLyze - Fast and comprehensive SSL/TLS configuration analyzer
• Anew - Append new lines to files for efficient data processing
• QSReplace - Query string parameter replacement for systematic testing
• Uro - URL filtering and deduplication for efficient testing
• Whatweb - Web technology identification with fingerprinting
• JWT-Tool - JSON Web Token testing with algorithm confusion
• GraphQL-Voyager - GraphQL schema exploration and introspection testing
• Burp Suite Extensions - Custom extensions for advanced web testing
• ZAP Proxy - OWASP ZAP integration for automated security scanning
• Wfuzz - Web application fuzzer with advanced payload generation
• Commix - Command injection exploitation tool with automated detection
• NoSQLMap - NoSQL injection testing for MongoDB, CouchDB, etc.
• Tplmap - Server-side template injection exploitation tool

🌐 Advanced Browser Agent:

• Headless Chrome Automation - Full Chrome browser automation with Selenium
• Screenshot Capture - Automated screenshot generation for visual inspection
• DOM Analysis - Deep DOM tree analysis and JavaScript execution monitoring
• Network Traffic Monitoring - Real-time network request/response logging
• Security Header Analysis - Comprehensive security header validation
• Form Detection & Analysis - Automatic form discovery and input field analysis
• JavaScript Execution - Dynamic content analysis with full JavaScript support
• Proxy Integration - Seamless integration with Burp Suite and other proxies
• Multi-page Crawling - Intelligent web application spidering and mapping
• Performance Metrics - Page load times, resource usage, and optimization insights

🔐 Authentication & Password Security (12+ Tools)

• Hydra - Network login cracker supporting 50+ protocols
• John the Ripper - Advanced password hash cracking with custom rules
• Hashcat - World's fastest password recovery tool with GPU acceleration
• Medusa - Speedy, parallel, modular login brute-forcer
• Patator - Multi-purpose brute-forcer with advanced modules
• NetExec - Swiss army knife for pentesting networks
• SMBMap - SMB share enumeration and exploitation tool
• Evil-WinRM - Windows Remote Management shell with PowerShell integration
• Hash-Identifier - Hash type identification tool
• HashID - Advanced hash algorithm identifier with confidence scoring
• CrackStation - Online hash lookup integration
• Ophcrack - Windows password cracker using rainbow tables

🔬 Binary Analysis & Reverse Engineering (25+ Tools)

• GDB - GNU Debugger with Python scripting and exploit development support
• GDB-PEDA - Python Exploit Development Assistance for GDB
• GDB-GEF - GDB Enhanced Features for exploit development
• Radare2 - Advanced reverse engineering framework with comprehensive analysis
• Ghidra - NSA's software reverse engineering suite with headless analysis
• IDA Free - Interactive disassembler with advanced analysis capabilities
• Binary Ninja - Commercial reverse engineering platform
• Binwalk - Firmware analysis and extraction tool with recursive extraction
• ROPgadget - ROP/JOP gadget finder with advanced search capabilities
• Ropper - ROP gadget finder and exploit development tool
• One-Gadget - Find one-shot RCE gadgets in libc
• Checksec - Binary security property checker with comprehensive analysis
• Strings - Extract printable strings from binaries with filtering
• Objdump - Display object file information with Intel syntax
• Readelf - ELF file analyzer with detailed header information
• XXD - Hex dump utility with advanced formatting
• Hexdump - Hex viewer and editor with customizable output
• Pwntools - CTF framework and exploit development library
• Angr - Binary analysis platform with symbolic execution
• Libc-Database - Libc identification and offset lookup tool
• Pwninit - Automate binary exploitation setup
• Volatility - Advanced memory forensics framework
• MSFVenom - Metasploit payload generator with advanced encoding
• UPX - Executable packer/unpacker for binary analysis

☁️ Cloud & Container Security (20+ Tools)

• Prowler - AWS/Azure/GCP security assessment with compliance checks
• Scout Suite - Multi-cloud security auditing for AWS, Azure, GCP, Alibaba Cloud
• CloudMapper - AWS network visualization and security analysis
• Pacu - AWS exploitation framework with comprehensive modules
• Trivy - Comprehensive vulnerability scanner for containers and IaC
• Clair - Container vulnerability analysis with detailed CVE reporting
• Kube-Hunter - Kubernetes penetration testing with active/passive modes
• Kube-Bench - CIS Kubernetes benchmark checker with remediation
• Docker Bench Security - Docker security assessment following CIS benchmarks
• Falco - Runtime security monitoring for containers and Kubernetes
• Checkov - Infrastructure as code security scanning
• Terrascan - Infrastructure security scanner with policy-as-code
• CloudSploit - Cloud security scanning and monitoring
• AWS CLI - Amazon Web Services command line with security operations
• Azure CLI - Microsoft Azure command line with security assessment
• GCloud - Google Cloud Platform command line with security tools
• Kubectl - Kubernetes command line with security context analysis
• Helm - Kubernetes package manager with security scanning
• Istio - Service mesh security analysis and configuration assessment
• OPA - Policy engine for cloud-native security and compliance

🏆 CTF & Forensics Tools (20+ Tools)

• Volatility - Advanced memory forensics framework with comprehensive plugins
• Volatility3 - Next-generation memory forensics with enhanced analysis
• Foremost - File carving and data recovery with signature-based detection
• PhotoRec - File recovery software with advanced carving capabilities
• TestDisk - Disk partition recovery and repair tool
• Steghide - Steganography detection and extraction with password support
• Stegsolve - Steganography analysis tool with visual inspection
• Zsteg - PNG/BMP steganography detection tool
• Outguess - Universal steganographic tool for JPEG images
• ExifTool - Metadata reader/writer for various file formats
• Binwalk - Firmware analysis and reverse engineering with extraction
• Scalpel - File carving tool with configurable headers and foote

…

Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

• Author: 0x4m4
• Source: 0x4m4/hexstrike-ai
• License: MIT
• Homepage: https://www.hexstrike.com/

Install and usage instructions live in the source repository linked above.