use_alienx_tools native flag

60+ Native Tools.
Zero Overhead Tool Calling.

Frontier models send ~2,500 tokens of tool definitions every round. With use_alienx_tools, alienxmodel already knows its tools — baked in during training. Available via MCP in Alienx Suite, or via standard OpenAI-compatible function calling for BYO harnesses.

Traffic & Proxy

http_request

Send raw HTTP requests through the Alienx Suite proxy. HTTP/2, TLS, cookie jar.

history_search

Query intercepted traffic by URL, status, content-type, or regex on response body.

repeater_hint

Suggest a request template for the Repeater (Forge) module.

Scanning & Recon

portmapper

Nmap-like TCP/UDP scanning with service fingerprinting. Multi-threaded, async I/O.

dir_bust_start

Directory busting: wordlist-based, recursive depth, status filter, extensions.

subdomain_enum

DNS brute + certificate transparency + APIs (crt.sh, AlienVault) for subdomains.

tech_stack

Wappalyzer-like fingerprinting: JS frameworks, headers, cookies, error pages.

Vulnerability Scanning

plugin_filter_run

100+ Rhai passive scan plugins (info disclosure, misconfig, secrets).

plugin_active_run

Active scan plugins: SQLi, XSS, SSTI, LFI, SSRF, command injection probes.

idor_tester

IDOR enumeration: parameterized IDs, JWT rotation, privilege testing.

sql_injector

SQLMap-like: union, boolean blind, time blind, error-based. MySQL, PG, MSSQL.

race_tester

Race condition detector: concurrent requests, TOCTOU analysis, limit bypass.

Exploitation

code_exec

Generate payloads: reverse shells (nc/bash/python), webshells, deserialization.

jwt_forge

JWT analysis: alg confusion, none-alg, weak HMAC, kid injection, JKU manipulation.

deserialize

Deserialization chains: PHP, Java, .NET, Python pickle, ysoserial-like gadgets.

Binary Analysis

memory_dump

Capture process memory via debug bridge. Virtual memory read/write.

bin_debug

Binary debugger: breakpoints, step, registers. WinDbg/GDB backends.

decompile

Ghidra-like decompiler: x86/x64/ARM/ARM64 to C pseudocode, function graph.

pe_analyze

PE/ELF/Mach-O analysis: imports, sections, entropy, packer detection.

rop_gadget

ROP gadget finder: search for useful gadgets, generate chains.

Crypto & Encoding

decode

Multi-format decoder: Base64/32/16, URL, Hex, HTML, Unicode, JWT, protobuf.

encode

Multi-format encoder. Generate encoded payloads for WAF bypass.

hash_crack

Hash cracking: MD5, SHA, bcrypt, NTLM, Kerberos. John/Hashcat bridge.

crypto_audit

Weak cipher scanner: ECB mode, short keys, predictable IV, hardcoded secrets.

Auth & Session

auth_bypass

Auth bypass: parameter pollution, verb tampering, header injection.

mfa_tester

MFA/2FA bypass: response manipulation, rate limiting, enrollment abuse.

password_spray

Brute/spray with adaptive rate limiting, response diffing detection.

Cloud & Infrastructure

ssrf_forge

SSRF exploitation: AWS/GCP/Azure metadata, internal scan, credential theft.

dns_recon

DNS recon: zone transfer, DNSSEC, CAA, SPF/DMARC audit.

Intel & Reporting

vuln_cve_lookup

CVE lookup: CVSS v3/v4, CWE mapping, EPSS probability, KEV catalog.

vuln_exploitdb_search

Search Exploit-DB for public PoCs by CVE, platform, or vuln type.

report_generate

Generate structured HackerOne-ready report: summary, steps, impact, remediation.

Automation & Desktop MCP

shell_execute

Execute shell commands with allowlist. Dry-run mode. Security-scoped.

script_save

Save Python/Node/Rust scripts locally. Version-controlled.

desktop_screenshot

Capture desktop screenshots for visual evidence in reports.

mcp_call

Bridge to any external MCP server. Extensible beyond built-in tools.

Baked in. Not sent every request.

Standard tool calling sends schemas every round — ~2,500 tokens wasted. alienxmodel knows its 60+ tools natively. Use use_alienx_tools in your prompt or system message.

View Plans — from $6/mo