How do I install the 0x4m4 Hexstrike AI skill?

Run npx skillmds add yanacuti1121/0x4m4-hexstrike-ai in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is 0x4m4 Hexstrike AI safe to use?

This skill has not completed SkillMD's automated safety review yet. Capability flags: makes network calls. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with 0x4m4 Hexstrike AI?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is 0x4m4 Hexstrike AI free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published 0x4m4 Hexstrike AI?

yanacuti1121 (@yanacuti1121) published this skill. Their other Agent Skills are listed on their SkillMD profile.

0x4m4 Hexstrike AI by yanacuti1121 — Agent Skill

Name: 0x4m4 Hexstrike AI
Rating: 4.5 (4 reviews)
Author: yanacuti1121

File contents

HexStrike AI: MCP server expose 150+ cybersec tools cho AI agent — Claude/GPT/Copilot tự chọn tool phù hợp, chạy automated pentesting và vulnerability discovery.

QUAN TRỌNG: Chỉ dùng cho authorized targets. Unauthorized testing = illegal.

Install & Start

git clone https://github.com/0x4m4/hexstrike-ai
cd hexstrike-ai
pip install -r requirements.txt
# Install required tools: nmap, nuclei, sqlmap, etc.
python3 hexstrike_server.py

MCP Config (Claude Desktop)

{
  "mcpServers": {
    "hexstrike-ai": {
      "command": "python3",
      "args": ["/path/to/hexstrike_mcp.py", "--server", "http://localhost:8888"],
      "timeout": 300
    }
  }
}

150+ Tools — 6 Categories

Network & Recon (25+)
  Nmap, Rustscan, Masscan, Amass, Subfinder, TheHarvester, Enum4linux

Web Application (40+)
  Gobuster, Feroxbuster, FFuf, Nuclei, SQLMap, WPScan, Dalfox, OWASP ZAP

Auth & Passwords (12+)
  Hydra, Hashcat, John the Ripper, Medusa, Evil-WinRM

Binary Analysis (25+)
  GDB, Radare2, Ghidra, Binwalk, Pwntools, Volatility, Angr

Cloud Security (20+)
  Prowler, Scout Suite, Trivy, Kube-Hunter, Docker Bench

CTF & Forensics (20+)
  Foremost, Steghide, ExifTool, CyberChef

Key MCP Tools

nmap_scan(target, flags)
nuclei_scan(target, templates)
sqlmap_scan(url, options)
ghidra_analyze(binary_path)
prowler_assess(cloud_provider)
# POST /api/intelligence/select-tools — AI chọn tool tự động
# POST /api/intelligence/analyze-target — target analysis

12 Specialized Agents

Intelligent tool selection + parameter optimization
Bug bounty workflow automation
CTF challenge solving
CVE intelligence gathering
Exploit code generation
Attack chain discovery

Speed Claims

Subdomain enumeration: 2-4h → 5-10min (24x faster)
Vuln scanning:         4-8h → 15-30min
Web app testing:       6-12h → 20-45min

Source

https://github.com/0x4m4/hexstrike-ai · MIT

---name: 0x4m4-hexstrike-aidescription: HexStrike AI — MCP server cho 150+ cybersecurity tools: Nmap, SQLMap, Nuclei, Ghidra, Prowler... AI agent tự chọn tool, chạy pentest, bug bounty automation. Cần authorization.--- HexStrike AI: MCP server expose 150+ cybersec tools cho AI agent — Claude/GPT/Copilot tự chọn tool phù hợp, chạy automated pentesting và vulnerability discovery. **QUAN TRỌNG**: Chỉ dùng cho authorized targets. Unauthorized testing = illegal. ## Install & Start ```bash git clone https://github.com/0x4m4/hexstrike-ai cd hexstrike-ai pip install -r requirements.txt # Install required tools: nmap, nuclei, sqlmap, etc. python3 hexstrike_server.py ``` ## MCP Config (Claude Desktop) ```json { "mcpServers": { "hexstrike-ai": { "command": "python3", "args": ["/path/to/hexstrike_mcp.py", "--server", "http://localhost:8888"], "timeout": 300 } } } ``` ## 150+ Tools — 6 Categories ``` Network & Recon (25+) Nmap, Rustscan, Masscan, Amass, Subfinder, TheHarvester, Enum4linux Web Application (40+) Gobuster, Feroxbuster, FFuf, Nuclei, SQLMap, WPScan, Dalfox, OWASP ZAP Auth & Passwords (12+) Hydra, Hashcat, John the Ripper, Medusa, Evil-WinRM Binary Analysis (25+) GDB, Radare2, Ghidra, Binwalk, Pwntools, Volatility, Angr Cloud Security (20+) Prowler, Scout Suite, Trivy, Kube-Hunter, Docker Bench CTF & Forensics (20+) Foremost, Steghide, ExifTool, CyberChef ``` ## Key MCP Tools ```python nmap_scan(target, flags) nuclei_scan(target, templates) sqlmap_scan(url, options) ghidra_analyze(binary_path) prowler_assess(cloud_provider) # POST /api/intelligence/select-tools — AI chọn tool tự động # POST /api/intelligence/analyze-target — target analysis ``` ## 12 Specialized Agents ``` Intelligent tool selection + parameter optimization Bug bounty workflow automation CTF challenge solving CVE intelligence gathering Exploit code generation Attack chain discovery ``` ## Speed Claims ``` Subdomain enumeration: 2-4h → 5-10min (24x faster) Vuln scanning: 4-8h → 15-30min Web app testing: 6-12h → 20-45min ``` ## Source https://github.com/0x4m4/hexstrike-ai · MIT

Frequently asked questions