HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.
Repository Index
88,073 visible repositories in the index
1–20 of 20 · Most stars
信息收集自动化工具
Simple OSINT script to find Instagram profiles by name and e-mail/phone
- osint
- open-source-intelligence
- socmint
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
- post-exploitation
- hacking
- backdoor
- stealth
NucleiFuzzer is a robust automation tool that efficiently detects web application vulnerabilities, including XSS, SQLi, SSRF, and Open Redirects, leveraging advanced scanning and URL enumeration techniques
- nuclei
- nuclei-templates
- fuzzing-templates
- nucleifuzzer
The Offensive Manual Web Application Penetration Testing Framework.
- web-penetration-testing
- reconnaissance
- vulnerability-analysis
- scanning-enumeration
Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.
- ai-security
- bug-bounty
- claude
- ctf
Open Source Intelligence Interface for Deep Web Scraping
- ahmia
- deep-web-search
- osint
- tor
This Script will help you to gather information about your victim or friend.
- kali-linux
- parrot
- osnit
- hacking
一款信息泄漏利用工具，适用于.git/.svn/.DS_Store泄漏和目录列出
- dumpall
- python3
- pentesting
- security
Search public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub, with CVSS, EPSS and CISA KEV context.
- cisa-kev
- cve
- cve-poc
- cvss
Pop shells like a master.
REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications
Academic papers related to fuzzing, binary analysis, and exploit dev, which I want to read or have already read
- fuzzing
- paper
- exploitation
- linux
The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
- csrf
- crawler
- csrf-attacks
- token-generation
honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway
Modern honeypot supporting multiple services, realistic website cloning, and AI-powered features
- cybersecurity
- honeypot
- python
- ai
Create n-grams of wordlists based on words, characters, or charsets to use in offline password attacks and data analysis
- hashcat
- jtr
- mdxfind
- ngram
A tool that converts Bitwarden's data into a hashcat-suitable hash
A CTF platform for The Many Hats Club