AI代理安全工具包

HEX-MCP 🚀

Advanced Kali-Based Security Suite for AI Agents

HEX-MCP is a refined, high-performance security platform designed to empower AI agents (like Cline, Kilo, Qwen, and Antigravity) with a comprehensive toolkit. It is based on the powerful HexStrike AI framework but optimized for a streamlined 50-tool core suite running in a persistent Kali Linux environment.

👨‍💻 Maintained By

Vasanthadithya Special thanks and credits to 0x4m4 and the original HexStrike AI project for the underlying architecture.

🛠️ Core 50-Tool Suite

This repository is pre-configured with a curated list of 50 essential security tools, categorized for maximum efficiency:

🔍 Reconnaissance & Scanning

• Nmap & Nmap Advanced - Port scanning and service discovery.
• Masscan - High-speed Internet-scale scanning.
• Amass & Subfinder - Passive and active subdomain discovery.
• Httpx - Fast HTTP probing and technology detection.
• Fierce & DNSEnum - DNS reconnaissance and zone transfers.

🌐 Web & API Security

• Nuclei - Template-based vulnerability scanning.
• Nikto - Web server configuration auditing.
• SQLMap - Automated SQL injection testing.
• Gobuster & Dirb - Directory and file brute-forcing.
• FFuf & Wfuzz - Fast web fuzzing and parameter discovery.
• Arjun - Hidden parameter discovery.
• Katana - Next-generation crawling and spidering.
• Wafw00f - Firewall fingerprinting.

🔐 Exploitation & Passwords

• Metasploit Framework - Full-scale exploitation.
• Hydra - Multi-protocol network login cracking.
• John the Ripper & Hashcat - Advanced password auditing.
• Responder - Credential harvesting in local networks.
• NetExec (NXC) - Swiss army knife for network pentesting.
• Evil-WinRM - Windows Remote Management shell.

☁️ Cloud & Container Security

• Prowler - Multi-cloud security assessment.
• Trivy - Container and IaC vulnerability scanning.
• Scout Suite - Cloud environment auditing.
• Kube-Hunter - Kubernetes penetration testing.
• Checkov - Infrastructure-as-code security.

🔬 Forensics & Analysis

• Volatility - Advanced memory forensics.
• Binwalk - Firmware analysis and extraction.
• ExifTool - Metadata extraction.
• Steghide - Steganography analysis.
• Foremost - File carving and recovery.

🚀 Quick Setup (Docker)

1. Build & Run

# Clone this repository
git clone https://github.com/Vasanthadithya-mundrathi/HEX-MCP.git
cd HEX-MCP

# Build the HEX image
docker build -t hex-mcp:latest .

# Launch the HEX container
docker run -d --name HEX hex-mcp:latest

# Start the internal API server
docker exec -d HEX python3 hexstrike_server.py

2. Verify Health

docker exec HEX curl -s http://127.0.0.1:8888/health

🤖 AI Client Integration

MCP Settings Configuration

To use HEX-MCP with your AI agent, add the following to your mcp_settings.json or cline_mcp_settings.json:

{
  "mcpServers": {
    "HEX": {
      "command": "docker",
      "args": ["exec", "-i", "HEX", "python3", "hexstrike_mcp.py"],
      "disabled": false,
      "trust": true,
      "autoApprove": [
        "nmap_scan", "nuclei_scan", "nikto_scan", "gobuster_scan", "sqlmap_scan",
        "metasploit_run", "hydra_attack", "prowler_scan", "trivy_scan", "server_health"
        /* ... add up to 50 tools here ... */
      ]
    }
  }
}

📜 Legal & Ethical Use

⚠️ WARNING: This tool is for authorized security testing and educational purposes only. Unauthorized access to computer systems is illegal and unethical. Always obtain written permission before testing any target.

Built for the future of AI-powered Cybersecurity. HEX-MCP v1.0