HunterX Configuration v6.0.0 — HunterX v6.0.0

HunterX Configuration

Overview

HunterX uses a 3-layer configuration system with the following priority order (highest to lowest):

1. CLI arguments – Highest priority, overrides all other sources
2. Environment variables – HX_* prefixed variables
3. YAML config file – Default path: hunterx.yaml

Each layer merges with and overrides the layers below it. Values not specified at any layer retain their compiled defaults.

1. Config File (hunterx.yaml)

The primary configuration file is written in YAML. Below is the full reference:

# HunterX Configuration
profile: bounty
stealth: medium
threads: 5
verify_ssl: true
output_dir: reports
evidence_level: medium
min_confidence: 0.0

# Intelligence Layer
intel: true
graph: true
attack_graph: true
threat_model: false
risk: false
purple: false
explain: true
browser: false
risk_profile: default
memory_db: true

# AI Configuration
ai:
  enabled: false
  model: llama3.2
  endpoint: http://localhost:11434
  provider: ollama
  cache_enabled: true
  metrics_enabled: true
  enable_streaming: false
  enable_fallback: true
  max_retries: 3
  default_provider: ollama
  default_model: llama3.2
  profiles:
    default:
      provider: ollama
      model: llama3.2
      temperature: 0.7
      max_tokens: 2048
    gpt4:
      provider: openai
      model: gpt-4
      temperature: 0.5
      max_tokens: 4096

# Auth Configuration
auth:
  type: none
  username: ""
  password: ""
  token: ""
  cookie_file: ""
  login_url: ""
  login_data: {}

# OOB Configuration
oob:
  enabled: false
  collaborator_url: ""

# Rate Limiting
rate_limit:
  max_rps: 10
  burst: 20

# Proxy
proxy:
  http: ""
  https: ""

# Presets
presets:
  quick:
    threads: 10
    stealth: low
    evidence_level: low
  full:
    threads: 20
    stealth: low
    evidence_level: high
  stealth:
    threads: 3
    stealth: high
    evidence_level: medium

Top-Level Fields

Intelligence Layer

AI Configuration (ai)

AI Profiles

Each profile entry supports the following fields:

Default profiles:

profiles:
  default:
    provider: ollama
    model: llama3.2
    temperature: 0.7
    max_tokens: 2048
  gpt4:
    provider: openai
    model: gpt-4
    temperature: 0.5
    max_tokens: 4096

Auth Configuration (auth)

OOB Configuration (oob)

Rate Limiting (rate_limit)

Proxy (proxy)

Presets (presets)

Presets are named configuration overlays that batch-set multiple fields at once.

2. Environment Variables

Every configuration value can be set via environment variables using the HX_ prefix. Nested keys use _ as a separator.

General

Intelligence Layer

AI Configuration

OOB Configuration

Auth Configuration

Rate Limiting

Proxy

3. Payload Execution Policy

Controls the aggressiveness of payload delivery and mutation. Defined as a 5-level policy system.

Configuration field: payload_policy (string, default: balanced)

4. Reasoning Safety Policy

Controls the strictness of AI reasoning and content filtering.

Configuration field: reasoning_policy (string, default: balanced)

5. Skill Policy

Controls safety and operational limits for loadable skills. Uses the same 5-level system as payload and reasoning policies.

Configuration field: skill_policy (string, default: balanced)

Each skill’s metadata declares its requirements; HunterX resolves conflicts between skill requirements and global policy by applying the more restrictive value.

Configuration Precedence (Detailed)

1. Default values are compiled into the binary.
2. YAML config file overrides defaults for any key that is present.
3. Environment variables (HX_*) override both YAML and defaults.
4. CLI flags override all other sources for the specified keys.

This merge is shallow per top-level key; nested maps (e.g., ai.profiles, auth.login_data) are replaced entirely rather than deep-merged.