Hexstrike Ai
未认领HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.
安装
pip install -r requirements.txt更多Security服务器
浏览完整目录安全概况
已认领和已认证的服务器每周接受一次静态扫描，显示代码能触及的范围（外部服务、环境变量、shell 命令、代理配置目录）以及带有已知公告的依赖。认领此列表即可获得。 安全概况的工作原理
40 个工具中显示 40 个
文档中列出的工具 (40)
内容来自项目文档。服务器握手不会验证每个工具的说明或行为。
ARP-Scan
Network discovery using ARP requests
AutoRecon
Comprehensive automated reconnaissance with 35+ parameters
CloudMapper
AWS network visualization and security analysis
CloudSploit
Cloud security scanning and monitoring
CrackStation
Online hash lookup integration
DNSEnum
DNS information gathering and subdomain brute forcing
Enum4linux
SMB enumeration with user, group, and share discovery
Enum4linux-ng
Advanced SMB enumeration with enhanced logging
Evil-WinRM
Windows Remote Management shell with PowerShell integration
FFuf
Fast web fuzzer with advanced filtering and parameter discovery
GCloud
Google Cloud Platform command line with security tools
GraphQL-Voyager
GraphQL schema exploration and introspection testing
Hash-Identifier
Hash type identification tool
HashID
Advanced hash algorithm identifier with confidence scoring
HTTPx
Fast HTTP probing and technology detection
JWT-Tool
JSON Web Token testing with algorithm confusion
Kube-Bench
CIS Kubernetes benchmark checker with remediation
Kube-Hunter
Kubernetes penetration testing with active/passive modes
Libc-Database
Libc identification and offset lookup tool
MSFVenom
Metasploit payload generator with advanced encoding
NBTScan
NetBIOS name scanning and enumeration
NetExec
Network service exploitation framework (formerly CrackMapExec)
NoSQLMap
NoSQL injection testing for MongoDB, CouchDB, etc.
One-Gadget
Find one-shot RCE gadgets in libc
ParamSpider
Parameter mining from web archives
PhotoRec
File recovery software with advanced carving capabilities
QSReplace
Query string parameter replacement for systematic testing
Radare2
Advanced reverse engineering framework with comprehensive analysis
ROPgadget
ROP/JOP gadget finder with advanced search capabilities
RPCClient
RPC enumeration and null session testing
SMBMap
SMB share enumeration and exploitation
SQLMap
Advanced automatic SQL injection testing with tamper scripts
SSLScan
SSL/TLS cipher suite enumeration
SSLyze
Fast and comprehensive SSL/TLS configuration analyzer
TestDisk
Disk partition recovery and repair tool
TestSSL
SSL/TLS configuration testing and vulnerability assessment
TheHarvester
Email and subdomain harvesting from multiple sources
Volatility3
Next-generation memory forensics with enhanced analysis
Wafw00f
Web application firewall fingerprinting
WPScan
WordPress security scanner with vulnerability database