HunterX v7.0.0 — AI-Assisted Vulnerability Discovery, Validation & Proof Engine

From "Possible vulnerability detected" to validated, evidence-driven findings — Observed → Hypothesized → Probed → Verified → Reproduced → Proven.

HunterX v7 is a major re-architecture of the platform around vulnerability validation and proof, not just detection. Traditional scanners stop at a detection; HunterX v7 continues through validation, reproduction, and evidence-backed proof of concept workflows.

🚀 1.7K+ Docker image pulls and counting.

What's New in v7

AI-Assisted Offensive Security

• Autonomous mission orchestration — create, run, checkpoint, resume and finalize full-spectrum security-assessment missions
• Adaptive Mission Planning Engine — attack-path planning, replanning and explainable next-best-action selection
• Observe → Hypothesize → Probe → Verify reasoning across the assessment lifecycle
• Evidence-driven findings with confidence, impact and report-readiness checks

Vulnerability Validation & Proof

• Evidence-driven vulnerability validation — hypothesis testing, validation verdicts, and controlled, safe Proof of Concept engineering with replay verification
• Reproducible proof workflows — proof contracts, minimal safe proofs, replay, reproducibility
• Professional reporting — findings, evidence bundles, remediation plans and multi-format exports (markdown, HTML, JSON, SARIF, PDF, package)

Platform & Intelligence

• Tool Integration SDK and Tool Integration Factory — 100+ registered security tools with machine-readable contracts, structured execution, parsing/normalization and dependency-aware chaining
• Security Skills, Knowledge Graph and Threat Modeling with cross-tool correlation and Attack Chain Analysis
• Cloud & SaaS Attack-Surface Intelligence — provider detection, resource/exposure/environment classification and topology
• Payload Intelligence for evidence capture and validation
• Target memory & campaign intelligence — snapshots, diffs, coverage and revalidation planning
• TIDB persistence — SQL storage with 21 linear Alembic migrations, events, audit and versioning

Security & Reliability

• HUNTERX_* environment-variable configuration overrides
• Safe XML parsing via defusedxml (XXE / entity-expansion hardened)
• Hardened hunterx base install and Docker image runtime
• Official Docker images (nullc0d30/hunterx) — multi-arch amd64/arm64, non-root, tags 7, 7.0, 7.0.0, latest, stable

Works with Your Security Ecosystem

HunterX orchestrates, correlates, validates and proves across an integrated ecosystem including Nmap, Nuclei, SQLmap, FFUF, Amass, Subfinder, httpx, Katana, OWASP ZAP, Metasploit, Semgrep, Gitleaks, TruffleHog, Dalfox, XSStrike, Ghauri, Commix, and Interactsh — as an orchestration, reasoning, correlation, validation and evidence layer around your offensive-security workflows.

Install

:::bash
pip install hunterxsec
hunterx --help

:::bash
docker pull nullc0d30/hunterx:7.0.0

Changelog

7.0.0

Added

• Clean Architecture v7 core (src/hunterx): domain, application, infrastructure, engines, agents, tools, plugins, knowledge, reporting, config, CLI and API layers
• Autonomous mission orchestration — create, run, checkpoint, resume and finalize full-spectrum security-assessment missions
• Adaptive mission planning — attack-path planning, replanning and explainable next-best-action selection
• Toolchain intelligence layer — 100+ registered security tools with machine-readable contracts, structured execution, parsing/normalization and dependency-aware chaining
• Evidence-driven vulnerability validation — hypothesis testing, validation verdicts, and controlled, safe proof/PoC engineering with replay verification
• Professional reporting — findings, evidence bundles, remediation plans and multi-format exports (markdown, HTML, JSON, SARIF, PDF, package)
• Target memory & campaign intelligence — snapshots, diffs, coverage and revalidation planning
• TIDB persistence — SQL storage with 21 linear Alembic migrations, events, audit and versioning
• HUNTERX_* environment-variable configuration overrides
• Mission persistence across CLI invocations and process restarts (restore path)
• Safe XML parsing via defusedxml (XXE / entity-expansion hardened)
• install.sh v7 installer (idempotent, database initialization, verified installation)

Fixed

• Base installation no longer crashes without optional extras (SQLAlchemy now a base dependency)
• mission create → mission start workflow works across separate CLI invocations
• Harden hunterx base install and Docker image runtime
• Ruff, dead-code (vulture) and bandit security gates green

Note on naming: HunterX publishes to PyPI as hunterxsec (the plain hunterx name on PyPI belongs to an unrelated project). The import package and CLI command remain hunterx.