hexstrike-ai

概述

HexStrike AI v6.0 是一个全面的网络安全自动化平台，将 AI 代理与网络安全能力连接起来。它采用多代理架构，具有智能决策、12+ 个自主 AI 代理和 150+ 种专业安全工具。系统支持多种 AI 客户端，包括 Claude Desktop、VS Code Copilot、Cursor 等，通过 MCP 协议实现自动化漏洞发现、漏洞赏金自动化和安全研究。

试试问 AI

装完之后，这里有 5 个你可以让 AI 做的事：

• nmap

  Advanced port scanning with custom NSE scripts and service detection

  试试:Scan example.com for open ports试试:Run Nmap with aggressive scan on 192.168.1.1
• sqlmap

  Advanced automatic SQL injection testing with tamper scripts

  试试:Test example.com/login for SQL injection试试:Run sqlmap with tamper scripts on a suspicious URL
• nuclei

  Fast vulnerability scanner with 4000+ templates

  试试:Scan example.com for known vulnerabilities试试:Run nuclei with custom templates on a target
• subfinder

  Fast passive subdomain discovery with multiple sources

  试试:Find all subdomains for example.com试试:Discover subdomains of a target domain
• nikto

  Web server vulnerability scanner with comprehensive checks

  试试:Scan example.com with Nikto试试:Check web server for vulnerabilities using Nikto
• hashcat

  World's fastest password recovery tool with GPU acceleration

  试试:Crack a password hash using hashcat试试:Brute force a password hash with hashcat
• wpscan

  WordPress security scanner with vulnerability database

  试试:Scan example.com WordPress site for vulnerabilities试试:Check WordPress version and plugins for security issues
• gobuster

  Directory, file, and DNS enumeration with intelligent wordlists

  试试:Find hidden directories on example.com试试:Run directory enumeration against a web server
• dalfox

  Advanced XSS vulnerability scanning with DOM analysis

  试试:Scan example.com for XSS vulnerabilities试试:Test a web application for cross-site scripting
• masscan

  High-speed Internet-scale port scanning with banner grabbing

  试试:Scan entire internet for port 80试试:Run masscan to find open ports on a large range
• amass

  Advanced subdomain enumeration and OSINT gathering

  试试:Perform subdomain enumeration on example.com试试:Gather OSINT information about a target domain
• ghidra

  NSA's software reverse engineering suite with headless analysis

  试试:Analyze a binary file with Ghidra试试:Disassemble and decompile a suspicious executable

可对比工具

安装

# 1. 克隆仓库
git clone https://github.com/0x4m4/hexstrike-ai.git
cd hexstrike-ai

# 2. 创建虚拟环境
python3 -m venv hexstrike-env
source hexstrike-env/bin/activate  # Linux/Mac
# hexstrike-env\Scripts\activate   # Windows

# 3. 安装 Python 依赖
pip3 install -r requirements.txt

# 4. 启动服务器
python3 hexstrike_server.py

{
  "mcpServers": {
    "hexstrike-ai": {
      "command": "python3",
      "args": [
        "/path/to/hexstrike-ai/hexstrike_mcp.py",
        "--server",
        "http://localhost:8888"
      ],
      "description": "HexStrike AI v6.0 - 高级网络安全自动化平台",
      "timeout": 300,
      "disabled": false
    }
  }
}

FAQ

支持哪些 AI 客户端？

HexStrike AI 支持 Claude Desktop、VS Code Copilot、Cursor、Roo Code 和其他兼容 MCP 的代理。

包含多少种安全工具？

该平台包含 150+ 种专业安全工具，涵盖网络扫描、Web 应用测试、密码破解、二进制分析和云安全等多个类别。

hexstrike-ai 对比