HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.
Repository Index
47,133 repositories indexed
1–19 of 19 · Most stars
Adversary Emulation Framework
- security-tools
- implant
- golang
- dns-server
Cameradar hacks its way into RTSP videosurveillance cameras
Server-Side Template Injection and Code Injection Detection and Exploitation Tool
UFONet - Denial of Service Toolkit
- dos
- ddos
- ufonet
- botnet
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
- post-exploitation
- hacking
- backdoor
- stealth
A tool to abuse Exchange services
- mapi
- exchange
- shells
- pentesting
Reverse Shell as a Service
- reverse-shell
- exploit
- vulnerability
- pentesting
Hashtopolis - distributed password cracking with Hashcat
- cracking
- distributed
- hashcat
- pentesting
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
- golang
- http-server
- https-server
- ctf
ScopeWeaver: English and Korean localization of ARTEX, with preserved AGPL-3.0 attribution.
A mostly-serverless distributed hash cracking platform
A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
A Linux packet crafting tool.
- packet-crafting
- networking
- hacking-tool
- intrusion-prevention
EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.
Bind/Reverse Shells, SOCKS, etc over Tor in Golang
- tor
- ethical-hacking
- reverse-shell
- bind-shell
Hash cracking WebApp & Server for hashcat
- cracking
- hacking-tool
- hashcat
Proof of concept denial of service over TOR stress test tool
Extract hashes from the MongoDB database server to a hash format that hashcat accepts: -m 24100 (SCRAM-SHA-1) or -m 24200 (SCRAM-SHA-256)