0x4m4/hexstrike-ai

github
github Python analyzed d689933

HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.

maintainer
0x4m4
licence
MIT
first seen
2026-05-22
last seen
2026-08-03
releases · 30d
0
github stars
12,794 reported
short id

0x4m4/hexstrike-ai is an MCP server distributed on github, maintained by 0x4m4, tracked here since May 2026. It has shipped 0 releases and exposes 150 tools. Tools include advanced_payload_generation, ai_generate_attack_suite, ai_generate_payload, ai_reconnaissance_workflow, ai_test_payload, ai_vulnerability_assessment, and 144 more. Its composite risk grade is C — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised 3 review prompts — dangerous code, exfiltration combo and toxic flow (lethal trifecta) — each a pattern worth a human look rather than a finding of fault.

Its 150 tools appear to reach filesystem, shell / exec and network, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

full security breakdown →

tools

20 of 150
  • advanced_payload_generation
  • ai_generate_attack_suite
  • ai_generate_payload
  • ai_reconnaissance_workflow
  • ai_test_payload
  • ai_vulnerability_assessment
  • amass_scan
  • analyze_target_intelligence
  • anew_data_processing
  • angr_symbolic_execution
  • api_fuzzer
  • api_schema_analyzer
  • arjun_parameter_discovery
  • arjun_scan
  • arp_scan_discovery
  • autorecon_comprehensive
  • autorecon_scan
  • binwalk_analyze
  • browser_agent_inspect
  • bugbounty_authentication_bypass_testing
All 150 tools →

release cadence · 90d

0 releases

No releases yet.

recent releases

last 0

No releases yet.