HunterX
AI-Assisted Offensive Security Platform and Intelligent Vulnerability Assessment Framework
Overview
HunterX is an open-source, AI-assisted offensive security platform and intelligent vulnerability assessment framework. Unlike traditional scanners that rely solely on payload execution or signature matching, HunterX follows a reasoning-driven workflow — Observe → Hypothesize → Probe → Verify — enabling context-aware security analysis, evidence-driven decision making, and intelligent vulnerability verification with explainable AI outputs.
Built as a modular cybersecurity platform, HunterX integrates an AI Reasoning Engine with provider abstraction, a Multi-Agent Architecture (10 agents), a Security Skills Framework (41 skills), a Knowledge Graph for attack path analysis, Payload Intelligence, Threat Modeling, MITRE ATT&CK mapping, OWASP mapping, CWE mapping, and CAPEC mapping. The platform covers web security, API security, cloud security, authentication security, and network security through a unified automation layer with enterprise-ready reporting.
Key Features
AI-Assisted Reasoning
Goals flow through a reasoning engine that plans, prompts, validates, and reaches consensus before returning results. Agents never talk directly to AI providers.
Security Skills Framework (41 skills)
Plugin-based skills covering web, API, cloud, network, and infrastructure security. Each skill carries MITRE ATT&CK, OWASP, CWE, and CAPEC metadata.
Multi-Agent Architecture
10 specialized agents coordinate through concurrent event and message buses, executing DAG-based workflows with state persistence, checkpoint, and resume capabilities.
Enterprise-Ready API
FastAPI server with 40+ endpoints covering scanning, payload management, agent coordination, reasoning, skills, AI provider management, configuration, and system health.
Knowledge Graph
Entity-relationship store for findings, targets, and contextual data; supports cross-scan correlation and path analysis.
Payload Intelligence
SQLite-indexed payload repository with FTS5 full-text search, 5-level execution policy, mutation engine (10 technique families), provenance tracking, user feedback loop, graph-based payload relationships, and context-aware selection.
Explore HunterX
Dive deeper into HunterX's capabilities, installation, usage, and more.