Trylle

Loading

Search Explore Sign upCreate an account Sign In

Loading

0x4m40x4m4/hexstrike-aihexstrike-ai

Public

SyncedPull mirror status: ok

Code Issues 67 Pull Requests 67 Releases 0 Actions

Commits · Medin v20260909 · 0x4m4/hexstrike-ai | Trylle

Commits on Wed, Aug 20, 2025

0x
add example prompts
7056c48Aug 20
Muhammad Osama
Merge pull request #24 from aoxley/patch-1
ba9dd71Aug 20
Muhammad Osama
video guide added and docs fix
654458eAug 20
Muhammad Osama
update docs with vid
e91f0bcAug 20
Muhammad Osama
docs update
4ad1a33Aug 20
Muhammad Osama
docs update
8ab6bc2Aug 20

Commits on Tue, Sep 9, 2025

Muhammad Osama
fixed hakrawler, bycrypt and other issues
bed3210Sep 9
Muhammad Osama
leaksapi sponsor
3a8ae76Sep 9
Muhammad Osama
readme update
0d63479Sep 9
Muhammad Osama
readme
3036587Sep 9
Muhammad Osama
readme update
afcb942Sep 9
Muhammad Osama
readme fix
72dec2cSep 9
Muhammad Osama
5ire v0.14.0 not supported
b716d57Sep 9

Commits on Fri, Sep 19, 2025

Muhammad Osama
fixed issue 'CVEIntelligenceManager' object has no attribute 'analyze_cve_exploitability'
85e78b0Sep 19
Muhammad Osama
real world cve exploit gen fixed (removed sampling only shits)
f14cb8fSep 19
Muhammad Osama
cve exploit gen update
a378cbdSep 19

Commits on Fri, Mar 6, 2026

Muhammad Osama
Add MIT License
c4e78feMar 6

Commits on Mon, Apr 27, 2026

Muhammad Osama
Update README.md
e7066d5Apr 27

Commits on Sun, Aug 2, 2026

medin
fix(server): respetar API_HOST/HEXSTRIKE_HOST en app.run — upstream hardcodeaba 0.0.0.0 (RCE expuesta a la LAN)
b196921Aug 2

Commits on Thu, Aug 6, 2026

medin
security: blindaje 3 capas — auth X-API-Key fail-closed en /api/* (before_request + hmac.compare_digest, HEXSTRIKE_API_KEY env), cliente MCP manda la key, Containerfile aislado (no-root uid 10001, read-only, cap-drop ALL, no-new-privileges) + run-container.sh. Verificado: sin key 401, con key 200, MCP OK, smoke test contenedor (uid 10001, touch /etc read-only, raw socket EPERM, mount no superuser)
7e4a8c8Aug 6
medin
chore(log): rotacion diaria de hexstrike.log con TimedRotatingFileHandler (backupCount 7, sufijo fecha) + .gitignore (log, pycache, venv, data). pycache de raiz limpiado (1.1 MB). Verificado: rollover PASS (backup conserva lineas), auth intacto (401/200), log truncado a 0 con backup manual
0dd002cAug 6

Commits on Fri, Aug 7, 2026

medin
fix(server): path traversal (CWE-22) en FileOperationsManager corregido
464897cAug 7
medin
docs(README): seccion run-container.sh (contenedor aislado)
22e4b25Aug 7

Commits on Sat, Aug 15, 2026

medin
fix(deps): requirements.txt coherente con el código real
b59ca86Aug 15

Commits on Wed, Aug 19, 2026

medin
fix(smart-scan): nmap-advanced ahora ejecuta nmap real (alias en execution map)
c38d38fAug 19
medin
fix(smart-scan): dalfox v3.2.1 — sintaxis nueva (url --url) + rc=1 con stdout = hallazgos
e04f200Aug 19

Commits on Sat, Aug 22, 2026

medin
feat(server): vulners NSE cableado — execute_nmap_scan usaba nse_scripts del optimizer (vuln,exploit) pero lo ignoraba; ahora --script= entra en la ruta del decision engine + vulners en el set por defecto (version→CVE)
da2512aAug 22
medin
feat(server): endpoint /api/tools/nmap acepta nse_scripts (vulners) — igual que nmap-advanced; ambas rutas del stack cruzan version con CVEs
0cbd15eAug 22

Commits on Mon, Aug 24, 2026

medin
fix: shodan mapping search → host (0 credits en free tier)
75f5258Aug 24
medin
feat(hexstrike): detecta 26 tools (20→26) + systemd service + fix shodan
f703cefAug 24

Commits on Tue, Aug 25, 2026

medin
feat(hexstrike): add mcp-probe tool (LLM Hound MCP probing)
6bdfc4fAug 25
medin
feat(osint): add holehe + sherlock-scan as OSINT tools
18d1cbbAug 25

Commits on Fri, Sep 4, 2026

medin
fix(sec): quitar credenciales hardcodeadas del config MCP
c73df55Sep 4

Commits on Wed, Sep 9, 2026

medin
Merge remote-tracking branch 'origin/master'
1757879Sep 9
medin
fix(sec): cerrar OS command injection en /api/tools/* y smart-scan (OWASP ch03)
a5d17dbSep 9

Commits on Fri, Sep 11, 2026

medin
fix(deps): declarar mcp en vez de fastmcp — el paquete listado no era el que el código importa
91f9c7eSep 11
medin
fix(deps): pinear pycparser<3 — angr 9.2.x asigna clex.filename y pycparser 3.0 lo volvió readonly
e06ff49Sep 11