0x4m4/hexstrike-ai

HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.

What it solves

HexStrike AI 是一个网络安全自动化平台，简化复杂的渗透测试和安全评估。它通过提供统一框架，让 AI 代理能够自主选择工具、优化参数并执行攻击链，解决了手动编排数十种不同安全工具的问题。

How it works

平台采用基于 Model Context Protocol (MCP) 的多代理架构。它通过 FastMCP 服务器连接 AI 客户端（如 Claude、GPT 或 Cursor）。“Intelligent Decision Engine”会分析目标并选择最佳策略，然后由专门的自主代理（如 BugBounty、CTF 或 CVE Intelligence 代理）执行。这些代理可以访问超过 150 种集成的安全工具，覆盖网络、Web、云和二进制分析领域。

Who it’s for

该平台面向渗透测试人员、漏洞赏金猎人、CTF（Capture The Flag）选手以及希望自动化侦察和利用阶段的安全研究人员。

Highlights

  • Massive Tool Integration: Access to 150+ professional tools including Nmap, SQLMap, Nuclei, and Ghidra.
  • Autonomous Agents: 12+ specialized agents for tasks like exploit generation and vulnerability intelligence.
  • MCP Compatible: Integrates directly with AI clients like Claude Desktop, VS Code Copilot, and Cursor.
  • Advanced Browser Agent: Features headless Chrome automation for DOM analysis, screenshot capture, and network traffic monitoring.
  • Multi-Domain Coverage: Supports network reconnaissance, web app security, cloud/container auditing, and binary reverse engineering.