# Hexstrike Ai > HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities. - **Type:** MCP server - **Install:** `agentstack add mcp-0x4m4-hexstrike-ai` - **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior - **Seller:** [0x4m4](https://agentstack.voostack.com/s/0x4m4) - **Installs:** 0 - **Category:** [AI & ML](https://agentstack.voostack.com/c/ai-and-ml) - **Latest version:** 0.1.0 - **License:** MIT - **Upstream author:** [0x4m4](https://github.com/0x4m4) - **Source:** https://github.com/0x4m4/hexstrike-ai - **Website:** https://www.hexstrike.com/ ## Install ```sh agentstack add mcp-0x4m4-hexstrike-ai ``` Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent. ## About # HexStrike AI MCP Agents v6.0 ### AI-Powered MCP Cybersecurity Automation Platform [](https://www.python.org/) [](LICENSE) [](https://github.com/0x4m4/hexstrike-ai) [](https://github.com/0x4m4/hexstrike-ai) [](https://github.com/0x4m4/hexstrike-ai/releases) [](https://github.com/0x4m4/hexstrike-ai) [](https://github.com/0x4m4/hexstrike-ai) [](https://github.com/0x4m4/hexstrike-ai) **Advanced AI-powered penetration testing MCP framework with 150+ security tools and 12+ autonomous AI agents** [📋 What's New](#whats-new-in-v60) • [🏗️ Architecture](#architecture-overview) • [🚀 Installation](#installation) • [🛠️ Features](#features) • [🤖 AI Agents](#ai-agents) • [📡 API Reference](#api-reference) --- ## Follow Our Social Accounts    --- ## Architecture Overview HexStrike AI MCP v6.0 features a multi-agent architecture with autonomous AI agents, intelligent decision-making, and vulnerability intelligence. ```mermaid %%{init: {"themeVariables": { "primaryColor": "#b71c1c", "secondaryColor": "#ff5252", "tertiaryColor": "#ff8a80", "background": "#2d0000", "edgeLabelBackground":"#b71c1c", "fontFamily": "monospace", "fontSize": "16px", "fontColor": "#fffde7", "nodeTextColor": "#fffde7" }}}%% graph TD A[AI Agent - Claude/GPT/Copilot] -->|MCP Protocol| B[HexStrike MCP Server v6.0] B --> C[Intelligent Decision Engine] B --> D[12+ Autonomous AI Agents] B --> E[Modern Visual Engine] C --> F[Tool Selection AI] C --> G[Parameter Optimization] C --> H[Attack Chain Discovery] D --> I[BugBounty Agent] D --> J[CTF Solver Agent] D --> K[CVE Intelligence Agent] D --> L[Exploit Generator Agent] E --> M[Real-time Dashboards] E --> N[Progress Visualization] E --> O[Vulnerability Cards] B --> P[150+ Security Tools] P --> Q[Network Tools - 25+] P --> R[Web App Tools - 40+] P --> S[Cloud Tools - 20+] P --> T[Binary Tools - 25+] P --> U[CTF Tools - 20+] P --> V[OSINT Tools - 20+] B --> W[Advanced Process Management] W --> X[Smart Caching] W --> Y[Resource Optimization] W --> Z[Error Recovery] style A fill:#b71c1c,stroke:#ff5252,stroke-width:3px,color:#fffde7 style B fill:#ff5252,stroke:#b71c1c,stroke-width:4px,color:#fffde7 style C fill:#ff8a80,stroke:#b71c1c,stroke-width:2px,color:#fffde7 style D fill:#ff8a80,stroke:#b71c1c,stroke-width:2px,color:#fffde7 style E fill:#ff8a80,stroke:#b71c1c,stroke-width:2px,color:#fffde7 ``` ### How It Works 1. **AI Agent Connection** - Claude, GPT, or other MCP-compatible agents connect via FastMCP protocol 2. **Intelligent Analysis** - Decision engine analyzes targets and selects optimal testing strategies 3. **Autonomous Execution** - AI agents execute comprehensive security assessments 4. **Real-time Adaptation** - System adapts based on results and discovered vulnerabilities 5. **Advanced Reporting** - Visual output with vulnerability cards and risk analysis --- ## Installation ### Quick Setup to Run the hexstrike MCPs Server ```bash # 1. Clone the repository git clone https://github.com/0x4m4/hexstrike-ai.git cd hexstrike-ai # 2. Create virtual environment python3 -m venv hexstrike-env source hexstrike-env/bin/activate # Linux/Mac # hexstrike-env\Scripts\activate # Windows # 3. Install Python dependencies pip3 install -r requirements.txt ``` ### Installation and Setting Up Guide for various AI Clients: #### Installation & Demo Video Watch the full installation and setup walkthrough here: [YouTube - HexStrike AI Installation & Demo](https://www.youtube.com/watch?v=pSoftCagCm8) #### Supported AI Clients for Running & Integration You can install and run HexStrike AI MCPs with various AI clients, including: - **5ire (Latest version v0.14.0 not supported for now)** - **VS Code Copilot** - **Roo Code** - **Cursor** - **Claude Desktop** - **Any MCP-compatible agent** Refer to the video above for step-by-step instructions and integration examples for these platforms. ### Install Security Tools **Core Tools (Essential):** ```bash # Network & Reconnaissance nmap masscan rustscan amass subfinder nuclei fierce dnsenum autorecon theharvester responder netexec enum4linux-ng # Web Application Security gobuster feroxbuster dirsearch ffuf dirb httpx katana nikto sqlmap wpscan arjun paramspider dalfox wafw00f # Password & Authentication hydra john hashcat medusa patator crackmapexec evil-winrm hash-identifier ophcrack # Binary Analysis & Reverse Engineering gdb radare2 binwalk ghidra checksec strings objdump volatility3 foremost steghide exiftool ``` **Cloud Security Tools:** ```bash prowler scout-suite trivy kube-hunter kube-bench docker-bench-security ``` **Browser Agent Requirements:** ```bash # Chrome/Chromium for Browser Agent sudo apt install chromium-browser chromium-chromedriver # OR install Google Chrome wget -q -O - https://dl.google.com/linux/linux_signing_key.pub | sudo apt-key add - echo "deb [arch=amd64] http://dl.google.com/linux/chrome/deb/ stable main" | sudo tee /etc/apt/sources.list.d/google-chrome.list sudo apt update && sudo apt install google-chrome-stable ``` ### Start the Server ```bash # Start the MCP server python3 hexstrike_server.py # Optional: Start with debug mode python3 hexstrike_server.py --debug # Optional: Custom port configuration python3 hexstrike_server.py --port 8888 ``` ### Verify Installation ```bash # Test server health curl http://localhost:8888/health # Test AI agent capabilities curl -X POST http://localhost:8888/api/intelligence/analyze-target \ -H "Content-Type: application/json" \ -d '{"target": "example.com", "analysis_type": "comprehensive"}' ``` --- ## AI Client Integration Setup ### Claude Desktop Integration or Cursor Edit `~/.config/Claude/claude_desktop_config.json`: ```json { "mcpServers": { "hexstrike-ai": { "command": "python3", "args": [ "/path/to/hexstrike-ai/hexstrike_mcp.py", "--server", "http://localhost:8888" ], "description": "HexStrike AI v6.0 - Advanced Cybersecurity Automation Platform", "timeout": 300, "disabled": false } } } ``` ### VS Code Copilot Integration Configure VS Code settings in `.vscode/settings.json`: ```json { "servers": { "hexstrike": { "type": "stdio", "command": "python3", "args": [ "/path/to/hexstrike-ai/hexstrike_mcp.py", "--server", "http://localhost:8888" ] } }, "inputs": [] } ``` --- ## Features ### Security Tools Arsenal **150+ Professional Security Tools:** 🔍 Network Reconnaissance & Scanning (25+ Tools) - **Nmap** - Advanced port scanning with custom NSE scripts and service detection - **Rustscan** - Ultra-fast port scanner with intelligent rate limiting - **Masscan** - High-speed Internet-scale port scanning with banner grabbing - **AutoRecon** - Comprehensive automated reconnaissance with 35+ parameters - **Amass** - Advanced subdomain enumeration and OSINT gathering - **Subfinder** - Fast passive subdomain discovery with multiple sources - **Fierce** - DNS reconnaissance and zone transfer testing - **DNSEnum** - DNS information gathering and subdomain brute forcing - **TheHarvester** - Email and subdomain harvesting from multiple sources - **ARP-Scan** - Network discovery using ARP requests - **NBTScan** - NetBIOS name scanning and enumeration - **RPCClient** - RPC enumeration and null session testing - **Enum4linux** - SMB enumeration with user, group, and share discovery - **Enum4linux-ng** - Advanced SMB enumeration with enhanced logging - **SMBMap** - SMB share enumeration and exploitation - **Responder** - LLMNR, NBT-NS and MDNS poisoner for credential harvesting - **NetExec** - Network service exploitation framework (formerly CrackMapExec) 🌐 Web Application Security Testing (40+ Tools) - **Gobuster** - Directory, file, and DNS enumeration with intelligent wordlists - **Dirsearch** - Advanced directory and file discovery with enhanced logging - **Feroxbuster** - Recursive content discovery with intelligent filtering - **FFuf** - Fast web fuzzer with advanced filtering and parameter discovery - **Dirb** - Comprehensive web content scanner with recursive scanning - **HTTPx** - Fast HTTP probing and technology detection - **Katana** - Next-generation crawling and spidering with JavaScript support - **Hakrawler** - Fast web endpoint discovery and crawling - **Gau** - Get All URLs from multiple sources (Wayback, Common Crawl, etc.) - **Waybackurls** - Historical URL discovery from Wayback Machine - **Nuclei** - Fast vulnerability scanner with 4000+ templates - **Nikto** - Web server vulnerability scanner with comprehensive checks - **SQLMap** - Advanced automatic SQL injection testing with tamper scripts - **WPScan** - WordPress security scanner with vulnerability database - **Arjun** - HTTP parameter discovery with intelligent fuzzing - **ParamSpider** - Parameter mining from web archives - **X8** - Hidden parameter discovery with advanced techniques - **Jaeles** - Advanced vulnerability scanning with custom signatures - **Dalfox** - Advanced XSS vulnerability scanning with DOM analysis - **Wafw00f** - Web application firewall fingerprinting - **TestSSL** - SSL/TLS configuration testing and vulnerability assessment - **SSLScan** - SSL/TLS cipher suite enumeration - **SSLyze** - Fast and comprehensive SSL/TLS configuration analyzer - **Anew** - Append new lines to files for efficient data processing - **QSReplace** - Query string parameter replacement for systematic testing - **Uro** - URL filtering and deduplication for efficient testing - **Whatweb** - Web technology identification with fingerprinting - **JWT-Tool** - JSON Web Token testing with algorithm confusion - **GraphQL-Voyager** - GraphQL schema exploration and introspection testing - **Burp Suite Extensions** - Custom extensions for advanced web testing - **ZAP Proxy** - OWASP ZAP integration for automated security scanning - **Wfuzz** - Web application fuzzer with advanced payload generation - **Commix** - Command injection exploitation tool with automated detection - **NoSQLMap** - NoSQL injection testing for MongoDB, CouchDB, etc. - **Tplmap** - Server-side template injection exploitation tool **🌐 Advanced Browser Agent:** - **Headless Chrome Automation** - Full Chrome browser automation with Selenium - **Screenshot Capture** - Automated screenshot generation for visual inspection - **DOM Analysis** - Deep DOM tree analysis and JavaScript execution monitoring - **Network Traffic Monitoring** - Real-time network request/response logging - **Security Header Analysis** - Comprehensive security header validation - **Form Detection & Analysis** - Automatic form discovery and input field analysis - **JavaScript Execution** - Dynamic content analysis with full JavaScript support - **Proxy Integration** - Seamless integration with Burp Suite and other proxies - **Multi-page Crawling** - Intelligent web application spidering and mapping - **Performance Metrics** - Page load times, resource usage, and optimization insights 🔐 Authentication & Password Security (12+ Tools) - **Hydra** - Network login cracker supporting 50+ protocols - **John the Ripper** - Advanced password hash cracking with custom rules - **Hashcat** - World's fastest password recovery tool with GPU acceleration - **Medusa** - Speedy, parallel, modular login brute-forcer - **Patator** - Multi-purpose brute-forcer with advanced modules - **NetExec** - Swiss army knife for pentesting networks - **SMBMap** - SMB share enumeration and exploitation tool - **Evil-WinRM** - Windows Remote Management shell with PowerShell integration - **Hash-Identifier** - Hash type identification tool - **HashID** - Advanced hash algorithm identifier with confidence scoring - **CrackStation** - Online hash lookup integration - **Ophcrack** - Windows password cracker using rainbow tables 🔬 Binary Analysis & Reverse Engineering (25+ Tools) - **GDB** - GNU Debugger with Python scripting and exploit development support - **GDB-PEDA** - Python Exploit Development Assistance for GDB - **GDB-GEF** - GDB Enhanced Features for exploit development - **Radare2** - Advanced reverse engineering framework with comprehensive analysis - **Ghidra** - NSA's software reverse engineering suite with headless analysis - **IDA Free** - Interactive disassembler with advanced analysis capabilities - **Binary Ninja** - Commercial reverse engineering platform - **Binwalk** - Firmware analysis and extraction tool with recursive extraction - **ROPgadget** - ROP/JOP gadget finder with advanced search capabilities - **Ropper** - ROP gadget finder and exploit development tool - **One-Gadget** - Find one-shot RCE gadgets in libc - **Checksec** - Binary security property checker with comprehensive analysis - **Strings** - Extract printable strings from binaries with filtering - **Objdump** - Display object file information with Intel syntax - **Readelf** - ELF file analyzer with detailed header information - **XXD** - Hex dump utility with advanced formatting - **Hexdump** - Hex viewer and editor with customizable output - **Pwntools** - CTF framework and exploit development library - **Angr** - Binary analysis platform with symbolic execution - **Libc-Database** - Libc identification and offset lookup tool - **Pwninit** - Automate binary exploitation setup - **Volatility** - Advanced memory forensics framework - **MSFVenom** - Metasploit payload generator with advanced encoding - **UPX** - Executable packer/unpacker for binary analysis ☁️ Cloud & Container Security (20+ Tools) - **Prowler** - AWS/Azure/GCP security assessment with compliance checks - **Scout Suite** - Multi-cloud security auditing for AWS, Azure, GCP, Alibaba Cloud - **CloudMapper** - AWS network visualization and security analysis - **Pacu** - AWS exploitation framework with comprehensive modules - **Trivy** - Comprehensive vulnerability scanner for containers and IaC - **Clair** - Container vulnerability analysis with detailed CVE reporting - **Kube-Hunter** - Kubernetes penetration testing with active/passive modes - **Kube-Bench** - CIS Kubernetes benchmark checker with remediation - **Docker Bench Security** - Docker security assessment following CIS benchmarks - **Falco** - Runtime security monitoring for containers and Kubernetes - **Checkov** - Infrastructure as code security scanning - **Terrascan** - Infrastructure security scanner with policy-as-code - **CloudSploit** - Cloud security scanning and monitoring - **AWS CLI** - Amazon Web Services command line with security operations - **Azure CLI** - Microsoft Azure command line with security assessment - **GCloud** - Google Cloud Platform command line with security tools - **Kubectl** - Kubernetes command line with security context analysis - **Helm** - Kubernetes package manager with security scanning - **Istio** - Service mesh security analysis and configuration assessment - **OPA** - Policy engine for cloud-native security and compliance 🏆 CTF & Forensics Tools (20+ Tools) - **Volatility** - Advanced memory forensics framework with comprehensive plugins - **Volatility3** - Next-generation memory forensics with enhanced analysis - **Foremost** - File carving and data recovery with signature-based detection - **PhotoRec** - File recovery software with advanced carving capabilities - **TestDisk** - Disk partition recovery and repair tool - **Steghide** - Steganography detection and extraction with password support - **Stegsolve** - Steganography analysis tool with visual inspection - **Zsteg** - PNG/BMP steganography detection tool - **Outguess** - Universal steganographic tool for JPEG images - **ExifTool** - Metadata reader/writer for various file formats - **Binwalk** - Firmware analysis and reverse engineering with extraction - **Scalpel** - File carving tool with configurable headers and foote … ## Source & license This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code. - **Author:** [0x4m4](https://github.com/0x4m4) - **Source:** [0x4m4/hexstrike-ai](https://github.com/0x4m4/hexstrike-ai) - **License:** MIT - **Homepage:** https://www.hexstrike.com/ Install and usage instructions live in the source repository linked above. ## Pricing - **Free** — Free ## Security capabilities Automated source analysis of v0.1.0 — what this tool can access: - **Network access:** yes - **Filesystem access:** no - **Shell / process execution:** no - **Environment & secrets:** no - **Dynamic code execution:** no *"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.* ## Versions - **0.1.0** — security scan: passed — Imported from the upstream source. ## Links - Listing page: https://agentstack.voostack.com/l/mcp-0x4m4-hexstrike-ai - Seller: https://agentstack.voostack.com/s/0x4m4 - Browse the marketplace: https://agentstack.voostack.com/browse --- Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.