HunterX Features
HunterX combines 41 security skills, 10 specialized AI agents, knowledge graph, payload intelligence, and enterprise-ready reporting into a single extensible security automation framework.
Core Feature Categories
AI-Assisted Reasoning
Goals flow through a reasoning engine that plans, prompts, validates, and reaches consensus before returning results. Agents never talk directly to AI providers.
Security Skills Framework (41 skills)
Plugin-based skills covering web, API, cloud, network, and infrastructure security. Each skill carries MITRE ATT&CK, OWASP, CWE, and CAPEC metadata.
10 Specialized AI Agents
Scan Agent, Analysis Agent, Risk Agent, Exploit Agent, Report Agent, Monitor Agent, Discover Agent, Fingerprint Agent, Correlation Agent, Threat Agent.
Knowledge Graph
Entity-relationship store for findings, targets, and contextual data; supports cross-scan correlation and path analysis.
Payload Intelligence
SQLite-indexed payload repository with FTS5 full-text search, 5-level execution policy, mutation engine (10 technique families), provenance tracking, user feedback loop, graph-based payload relationships, and context-aware selection.
Enterprise-Ready API
FastAPI server with 40+ endpoints covering scanning, payload management, agent coordination, reasoning, skills, AI provider management, configuration, and system health.
Security Skills Coverage
HunterX's 41 security skills are organized into five categories, providing comprehensive coverage across the attack surface:
Web Security
LFI, RFI, SQLi, NoSQLi, XSS (reflected, stored, DOM), SSTI, SSRF, XXE, Command Injection, Path Traversal, Deserialization, Open Redirect, LDAP Injection, XPath Injection, Header Injection, CRLF Injection, Server-Side Include
API Security
REST API fuzzing (path, parameter, body), GraphQL introspection, WebSocket message analysis, gRPC service inspection, OpenAPI/Swagger validation, API version detection, rate limit testing
Cloud Security
Secrets detection (AWS keys, GCP service accounts, Azure shared keys, generic API tokens), Cloud Metadata Service abuse (IMDSv1/v2), S3 bucket enumeration, Azure Blob discovery, GCP Storage bucket inspection, Kubernetes API assessment, Docker daemon analysis, CI/CD secrets leakage
Authentication & Authorization
Basic, Bearer token, Cookie Jar (session replay), Form Login (credential-based), JWT analysis (claims, signature, algorithm confusion), OAuth2 flow analysis, Session management assessment
Network Security
Port scanning, service fingerprinting, TLS analysis, SSL certificate validation, DNS enumeration, subdomain discovery
Reporting & Output Formats
HunterX produces reports in multiple formats suitable for different audiences and use cases:
JSON
Programmatic consumption, CI/CD integration, further analysis - Full structured data with all fields, raw requests/responses, metadata
HTML
Interactive review, stakeholder presentation - Standalone HTML with navigation, filtering, search, severity coloring
SARIF 2.1
IDE integration (VS Code, GitHub CodeQL), CI/CD pipelines - SARIF-compliant with rules, results, locations, code flows
Markdown
Quick human review, documentation, email - Summary, findings list with severity, recommendations
Attack Graph
Visual analysis of attack paths - HTML with embedded Graphviz, interactive graph, path highlighting
ZIP Evidence
Complete evidence package for audit or legal - Raw requests/responses, scanning metadata, configuration, timestamp evidence