id: hexstrike-ai-config

info:
  name: HexStrike AI MCP Agents - Config
  author: icarot
  severity: info
  description: |
    HexStrike AI MCP Agents server config page exposure.
  reference:
    - https://github.com/0x4m4/hexstrike-ai
  metadata:
    max-request: 1
    shodan-query: http.html:"HexStrike"
    vendor: hexstrike-ai
    product: hexstrike-ai
  tags: config,exposure,hexstrike-ai

http:
  - method: GET
    path:
      - "{{BaseURL}}/health"

    matchers-condition: and
    matchers:
      - type: word
        words:
          - 'HexStrike'
          - 'telemetry'
          - 'tools_status'
          - 'uptime'
          - 'version'
        condition: and

      - type: status
        status:
          - 200

    extractors:
      - type: json
        name: version
        json:
          - ".version"
# digest: 4a0a00473045022100a228ade592d6489c8533f018d79b12edca784541460911d80fd1000014d02a1c022015d04982f15e440b691b43511b0024584a9e53c64632dd53b6e0f6848838b6e1:922c64590222798bb761d5b6d8e72950