hexstrike-ai-community-edition

Cloud infrastructure, container image, and Kubernetes security assessment via IAM review, secrets detection, and RBAC analysis.

Exploit lookup, payload generation, and delivery for confirmed vulnerabilities. Use only after validation has established concrete attack path.

Curated MCP prompts for multi-step attack chains and engagement playbooks. Use for guided workflows spanning multiple skills. Each prompt step now carries expected_time, priority, fallback, and result_context for agent-guided execution.

SMB service enumeration, share discovery, and RPC interrogation on Windows networks. Use to map Windows hosts before credential testing or lateral movement.

Wireless network assessment via monitor mode, handshake capture, and de-authentication testing. Use to assess WiFi security posture and crack WPA/WPA2.

Network reconnaissance via host discovery, port scanning, and service fingerprinting. Use during early reconnaissance phase to map attack surface and identify services.

Active Directory reconnaissance, privilege escalation path analysis, and Kerberos attack surface mapping. Use for domain exploitation and lateral movement.

Binary triage, reverse engineering, and exploit gadget discovery via static analysis and debuggers. Use for local binary assessment and ROP/payload development.

Open-source intelligence gathering on people, organizations, and domains via public sources and historical records.

Hash identification, offline cracking, and credential testing against services. Use to recover passwords from captured hashes or validate weak credentials.

Passive and active subdomain discovery via DNS, certificates, and source harvesting. Use to expand internet-facing attack surface before web recon.

Web application reconnaissance via endpoint mapping, content discovery, and technology fingerprinting. Use to build complete request surface before vulnerability scanning.

Web vulnerability scanning via template-based CVE matching, injection testing, and traversal detection. Use after endpoint mapping to find exploitable weaknesses.