HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.
Repository Index
73,362 visible repositories in the index
73–96 of 1,223 · Most stars
Prevents you from committing secrets and credentials into git repositories
Community curated list of templates for the nuclei engine to find security vulnerabilities.
- nuclei-templates
- nuclei
- bugbounty
- security
A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32
An HTTP toolkit for security research.
- mitm
- proxy
- http
- pentesting
hydra
- penetration-testing
- password-cracker
- network-security
- hydra
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
- opa
- policy
- declarative
- json
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
- vuls
- vulnerability-scanners
- golang
- go
Adversary Emulation Framework
- security-tools
- implant
- golang
- dns-server
Google's officially supported Node.js client library for accessing Google APIs. Support for authorization and authentication with OAuth 2.0, API Keys and JWT (Service Tokens) is included.
- google-api
- nodejs
- client
Your personal intelligence agent. Watches the world from multiple data sources and pings you when something changes.
Program for determining types of files for Windows, Linux and MacOS.
- debugger
- detect
- unpacker
- disassembler
Open-source intelligence for the global theater. Track everything from the corporate/private jets of the wealthy, and spy satellites, to seismic events in one unified interface. Hook an AI agent up to have it parse through data and find previously unseen correlations. The knowledge is available to all but rarely aggregated in the open, until now.
- osint
- osint-resources
- asdb
- cctv
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
- sn1per
- sn1per-professional
- bugbounty-platform
- attack-surface
🔐 JSON Web Token Authentication for Laravel & Lumen
- jwt
- laravel
- authentication
- php
Apereo CAS - Identity & Single Sign On for all earthlings and beyond.
- sso-authentication
- authentication
- authorization
- java
OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors
Solidity contracts implementing hash based post quantum signatures
Exploit Development and Reverse Engineering with GDB & LLDB Made Easy
- python
- gdb
- pwndbg
- reverse-engineering
Java JWT: JSON Web Token for Java and Android
- jwt
- java
- java-jwt
- jjwt
The recursive internet scanner for hackers. 🧡
Credentials recovery project
CryptoSwift is a growing collection of standard and secure cryptographic algorithms implemented in Swift
- swift
- aes
- cryptography
- commoncrypto
A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig – [✩Star] if you're using it!
- kubernetes
- openshift
- configmap
- secrets