1200KM / tool
HexStrike AI — Attack Tool
MCP-based orchestration layer for security tools. Attribute behavior to the invoked tool and operation; do not inherit the entire ATT&CK coverage of every available backend.
Tool identity and evidence
Editorial ecosystem entry, not an ATT&CK software object in the selected snapshot. Its linked capabilities are deliberately limited to the evidence below.
Aliases: none recorded
Existing author guides
- HexStrike AI: Install, Configure, and Run MCP with Gemini, OpenAI, Cursor, Llama · 2025-12-18
- AI-Driven Pentesting at Home: Using HexStrike-AI for Full Network Discovery and Exploitation · 2025-12-21
- AI-Driven Web Application Pentesting with HexStrike-AI · 2025-12-22
- Integrating Shodan with HexStrike-AI Using Gemini-CLI · 2025-12-23
- AI-Driven ZIP Password Recovery with HexStrike-AI and Gemini-CLI · 2025-12-25
- HexStrike-AI: A Force Multiplier for Red Teams — and a Dangerous Shift in the Threat Landscape · 2025-12-25
- HexStrike + Gemini vs. HackerAI: “Ops Copilot” vs. “Chatbot with Tools” · 2025-12-26
- AI-Driven Office Documents Password Recovery with HexStrike-AI and Gemini-CLI · 2025-12-29
- AI-Driven PDF Password Recovery with HexStrike-AI and Gemini-CLI · 2025-12-29
- HexStrike MCP Orchestration with Ollama: Ubuntu Host, Kali VM, SSH Bridging, and Performance… · 2025-12-31
- HexStrike+OpenAI Codex. AI-Driven Exploitation of Metasploitable. · 2026-01-03
- HexStrike + Gemini. AI-Assisted SSH Credential Brute-Force · 2026-01-04
- HexStrike + Gemini. AI-Assisted SMB Exposure Credential Brute-Force · 2026-01-05
- Building an Extremely Vulnerable Ubuntu 24.04 Server Lab (Bonus: Full PT with Hexstrike) · 2026-01-06
- HexStrike + Cursor (MCP): From Single Target → Full Subnet Compromise (Lab PT Walkthrough) · 2026-01-08
- HexStrike + Cursor for OSINT: From One Email to a Full Exposure Map · 2026-01-11
- Cursor + Hexstrike. Fully Automated ADCS ESC8 Attack · 2026-01-29
- AI-Assisted Web and Cloud Penetration Testing with Cursor + MCP HexStrike and Burp Suite MCP. · 2026-01-31
Primary documentation
No reviewed association in this snapshot.
Connected ecosystem references
Linked tags
Technique-specific simulations and detections
Detection links describe the associated behavior, not independently verified tool-specific signatures.
Telemetry context
Derived from the explicitly linked TTPs; not proof of sensor coverage for this tool.
Pinned research references. No browser attack runner or production-validated detector is asserted. Imported procedures remain unvalidated; any bounded lab evidence has its own scope. ATT&CK / Atomic provenance · Detection provenance.