How It Works

1. AI Agent Connection - Claude, GPT, or other MCP-compatible agents connect via FastMCP protocol
2. Intelligent Analysis - Decision engine analyzes targets and selects optimal testing strategies
3. Autonomous Execution - AI agents execute comprehensive security assessments
4. Real-time Adaptation - System adapts based on results and discovered vulnerabilities
5. Advanced Reporting - Visual output with vulnerability cards and risk analysis

Installation

Quick Setup to Run the hexstrike MCPs Server

# 1. Clone the repository
git clone https://github.com/0x4m4/hexstrike-ai.git
cd hexstrike-ai

# 2. Create virtual environment
python3 -m venv hexstrike-env
source hexstrike-env/bin/activate  # Linux/Mac
# hexstrike-env\Scripts\activate   # Windows

# 3. Install Python dependencies
pip3 install -r requirements.txt

Installation and Setting Up Guide for various AI Clients:

Installation & Demo Video

Watch the full installation and setup walkthrough here: YouTube - HexStrike AI Installation & Demo

Supported AI Clients for Running & Integration

You can install and run HexStrike AI MCPs with various AI clients, including:

• 5ire (Latest version v0.14.0 not supported for now)
• VS Code Copilot
• Roo Code
• Cursor
• Claude Desktop
• Any MCP-compatible agent

Refer to the video above for step-by-step instructions and integration examples for these platforms.

Install Security Tools

Core Tools (Essential):

# Network & Reconnaissance
nmap masscan rustscan amass subfinder nuclei fierce dnsenum
autorecon theharvester responder netexec enum4linux-ng

# Web Application Security
gobuster feroxbuster dirsearch ffuf dirb httpx katana
nikto sqlmap wpscan arjun paramspider dalfox wafw00f

# Password & Authentication
hydra john hashcat medusa patator crackmapexec
evil-winrm hash-identifier ophcrack

# Binary Analysis & Reverse Engineering
gdb radare2 binwalk ghidra checksec strings objdump
volatility3 foremost steghide exiftool

Cloud Security Tools:

prowler scout-suite trivy
kube-hunter kube-bench docker-bench-security

Browser Agent Requirements:

# Chrome/Chromium for Browser Agent
sudo apt install chromium-browser chromium-chromedriver
# OR install Google Chrome
wget -q -O - https://dl.google.com/linux/linux_signing_key.pub | sudo apt-key add -
echo "deb [arch=amd64] http://dl.google.com/linux/chrome/deb/ stable main" | sudo tee /etc/apt/sources.list.d/google-chrome.list
sudo apt update && sudo apt install google-chrome-stable

Start the Server

# Start the MCP server
python3 hexstrike_server.py

# Optional: Start with debug mode
python3 hexstrike_server.py --debug

# Optional: Custom port configuration
python3 hexstrike_server.py --port 8888

Verify Installation

# Test server health
curl http://localhost:8888/health

# Test AI agent capabilities
curl -X POST http://localhost:8888/api/intelligence/analyze-target \
  -H "Content-Type: application/json" \
  -d '{"target": "example.com", "analysis_type": "comprehensive"}'

AI Client Integration Setup

Claude Desktop Integration or Cursor

Edit ~/.config/Claude/claude_desktop_config.json:

{
  "mcpServers": {
    "hexstrike-ai": {
      "command": "python3",
      "args": [
        "/path/to/hexstrike-ai/hexstrike_mcp.py",
        "--server",
        "http://localhost:8888"
      ],
      "description": "HexStrike AI v6.0 - Advanced Cybersecurity Automation Platform",
      "timeout": 300,
      "disabled": false
    }
  }
}

VS Code Copilot Integration

Configure VS Code settings in .vscode/settings.json:

{
  "servers": {
    "hexstrike": {
      "type": "stdio",
      "command": "python3",
      "args": [
        "/path/to/hexstrike-ai/hexstrike_mcp.py",
        "--server",
        "http://localhost:8888"
      ]
    }
  },
  "inputs": []
}

Features

Security Tools Arsenal

150+ Professional Security Tools:

• Nmap - Advanced port scanning with custom NSE scripts and service detection
• Rustscan - Ultra-fast port scanner with intelligent rate limiting
• Masscan - High-speed Internet-scale port scanning with banner grabbing
• AutoRecon - Comprehensive automated reconnaissance with 35+ parameters
• Amass - Advanced subdomain enumeration and OSINT gathering
• Subfinder - Fast passive subdomain discovery with multiple sources
• Fierce - DNS reconnaissance and zone transfer testing
• DNSEnum - DNS information gathering and subdomain brute forcing
• TheHarvester - Email and subdomain harvesting from multiple sources
• ARP-Scan - Network discovery using ARP requests
• NBTScan - NetBIOS name scanning and enumeration
• RPCClient - RPC enumeration and null session testing
• Enum4linux - SMB enumeration with user, group, and share discovery
• Enum4linux-ng - Advanced SMB enumeration with enhanced logging
• SMBMap - SMB share enumeration and exploitation
• Responder - LLMNR, NBT-NS and MDNS poisoner for credential harvesting
• NetExec - Network service exploitation framework (formerly CrackMapExec)

• Gobuster - Directory, file, and DNS enumeration with intelligent wordlists
• Dirsearch - Advanced directory and file discovery with enhanced logging
• Feroxbuster - Recursive content discovery with intelligent filtering
• FFuf - Fast web fuzzer with advanced filtering and parameter discovery
• Dirb - Comprehensive web content scanner with recursive scanning
• HTTPx - Fast HTTP probing and technology detection
• Katana - Next-generation crawling and spidering with JavaScript support
• Hakrawler - Fast web endpoint discovery and crawling
• Gau - Get All URLs from multiple sources (Wayback, Common Crawl, etc.)
• Waybackurls - Historical URL discovery from Wayback Machine
• Nuclei - Fast vulnerability scanner with 4000+ templates
• Nikto - Web server vulnerability scanner with comprehensive chec