HunterX Practical Examples

Explore real-world examples of how to use HunterX for various security assessment scenarios.

Web Application Security Testing

OWASP Top 10 Testing

Comprehensive testing against the OWASP Top 10 vulnerabilities:

python hunterx.py -u http://vulnerable-app.com \\ --preset full \\ --profile bounty \\ --report-format html \\ -o ./reports/owasp-test

Authentication Bypass Testing

Test for common authentication bypass vulnerabilities:

python hunterx.py -u http://app.com/login \\ --auth form \\ --username admin \\ --password password123 \\ --preset full \\ -o ./reports/auth-bypass

API Security Assessment

Assess REST and GraphQL APIs for security weaknesses:

python hunterx.py -u http://api.example.com \\ --preset full \\ --profile gov \\ --report-format sarif \\ -o ./reports/api-assessment

SARIF output enables integration with GitHub CodeQL and other security tools.

Cloud & Infrastructure Security

Cloud Metadata Service Testing

Test for exposure of cloud instance metadata services:

python hunterx.py -u http://169.254.169.254 \\ --preset full \\ --profile gov \\ --stealth high \\ -o ./reports/cloud-metadata

Container Security Assessment

Scan containerized applications and orchestration platforms:

python hunterx.py -u http://k8s-dashboard.internal \\ --preset full \\ --profile internal \\ --report-format json \\ -o ./reports/k8s-assessment

Serverless Function Testing

Assess AWS Lambda, Azure Functions, and Google Cloud Functions:

python hunterx.py -u https://function-app.azurewebsites.net/api/hello \\ --preset full \\ --profile bounty \\ --report-format markdown \\ -o ./reports/serverless-test

Network & Infrastructure Testing

Network Service Discovery

Identify and assess exposed network services:

python hunterx.py -u http://10.0.0.0/24 \\ --preset quick \\ --profile internal \\ --report-format json \\ -o ./reports/network-discovery

WebSocket Security Testing

Assess real-time web applications using WebSocket connections:

python hunterx.py -u ws://websocket.example.com \\ --preset full \\ --profile bounty \\ -o ./reports/websocket-test

DNS & Subdomain Enumeration

Discover subdomains and assess DNS infrastructure:

python hunterx.py -u http://example.com \\ --preset full \\ --profile bounty \\ --report-format html \\ -o ./reports/dns-enumeration

CI/CD Integration Examples

GitHub Actions Integration

Automate security scanning in your CI/CD pipeline:

name: Security Scan

on:
  push:
    branches: [ main ]
  pull_request:
    branches: [ main ]

jobs:
  security-scan:
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v3
    - name: Run HunterX Security Scan
      uses: docker://nullc0d30/hunterx:latest
      with:
        args: >
          -u http://staging-app.internal
          --preset full
          --profile bounty
          --report-format sarif
          -o /github/workspace/security-results
      env:
        OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}

Jenkins Pipeline Integration

Add security stages to your Jenkins pipelines:

pipeline {
    agent any
    stages {
        stage('Security Scan') {
            steps {
                sh '''docker run --rm \
                    -v ${WORKSPACE}:/app \
                    -e OPENAI_API_KEY=${OA_API_KEY} \
                    nullc0d30/hunterx:latest \
                    -u http://staging-app.internal \
                    --preset full \
                    --profile bounty \
                    --report-format json \
                    -o /app/security-results'''
                
                // Publish results
                junit 'security-results/**/*.xml'
            }
        }
    }
}

Advanced Usage Examples

Custom Payload Testing

Use specialized payloads for targeted testing:

python hunterx.py -u http://target.com \\ -p /path/to/custom/payloads \\ --preset full \\ --profile research \\ -o ./reports/custom-payload-test

Multiple Target Assessment

Scan multiple targets from a file:

python hunterx.py -f targets.txt \\ --preset full \\ --profile gov \\ --report-format json \\ -o ./reports/batch-assessment

Where targets.txt contains one URL per line.

API Server for Automated Testing

Run HunterX as a service for automated testing frameworks:


                  # Start the API server
                  docker run -d --name hunterx-api \
                  -p 8443:8443 \
                  -v $(pwd)/reports:/data \
                  nullc0d30/hunterx:latest \
                  api --port 8443
                  
                  # Submit a scan job
                  curl -X POST http://localhost:8443/scan \
                  -H "Content-Type: application/json" \
                  -d '{"url": "http://target.com", "preset": "full", "profile": "bounty"}'

Back to HunterX Hub