HexStrike AI
Penetration Testing Orchestrator
Bridge large language models to real-world security tools via MCP. Write a scoped objective — HexStrike assists with tool selection, execution, troubleshooting, evidence collection, and reporting.
prioritize findings, collect evidence.
Why HexStrike
Not a scanner. An orchestration layer.
Traditional tools execute one command at a time. HexStrike helps coordinate approved tool execution, troubleshooting, evidence collection, and reporting.
AI-Assisted Orchestration
HexStrike helps operators select tools, preserve context, troubleshoot failures, collect evidence, and turn lab results into structured reports.
150+ Security Tools
Nmap, Metasploit, Burp Suite, Hydra, SQLMap, Aircrack-ng, Hashcat, Ghidra, CrackMapExec, Shodan, theHarvester — all orchestrated by natural language prompts.
Multi-LLM Support
Works with Gemini CLI, OpenAI Codex, Cursor (MCP), and local Ollama models. Pick the right engine for the engagement — cloud speed or air-gapped privacy.
Assessment Workflow Coverage
Recon, enumeration, validation, evidence collection, remediation notes, and reporting are organized into repeatable, approval-gated lab workflows.
Real Error Recovery
When tools fail, HexStrike helps diagnose the problem, compare alternatives, and document the recovery path for review.
Structured Reporting
Produces executive summaries, technical findings with CVSS scores, evidence bundles, and prioritized remediation recommendations automatically.
Documentation
Everything you need
From first installation to controlled lab validation — each workflow is documented with practical examples and evidence.
Getting Started
What HexStrike is, installation on Kali Linux, and how it compares to HackerAI and other AI security tools.
LLM Integrations
Connect HexStrike to Gemini CLI, OpenAI Codex, Cursor MCP, or local Ollama models for air-gapped labs.
Recon & OSINT
Passive intelligence with Shodan integration and email-to-full-exposure-map OSINT workflows.
Attack Techniques
Network, web, wireless, SSH, SMB, Active Directory, ADCS ESC8, and combined web+cloud attack walkthroughs.
Password Recovery
Authorized recovery labs and credential-strength audits for ZIP, PDF, Office documents, WiFi, SSH, and exposed credentials.
Full PT Walkthroughs
End-to-end lab engagements: subnet assessment, black-box Active Directory validation, and web+cloud evidence workflows.
How It Works
Four steps, one prompt
Write a scoped objective. HexStrike assists with tool selection, execution, and reporting.
Write a Goal
Describe your objective in plain language — "Assess this subnet and summarize risk" or "Recover this PDF I own."
HexStrike Plans
The LLM proposes tools and sequencing for operator review, then helps keep results and evidence organized.
Tools Execute
HexStrike executes approved tool calls, parses results, and feeds findings back into the workflow for the next reviewed step.
Report Delivered
Structured findings with evidence, CVSS scores, and remediation recommendations — ready to deliver.
Ready to start your first AI-assisted lab assessment?
Follow the complete guide — from installation to scoped evidence collection and reporting.