From 26a8c84dc515f10f1f7bf1514c28864c7106304c Mon Sep 17 00:00:00 2001 From: CyberSecurityUP Date: Fri, 10 Jul 2026 00:40:01 -0300 Subject: [PATCH] =?UTF-8?q?v3.5.6=20=E2=80=94=20bug-bounty=20corpus=20grou?= =?UTF-8?q?nding=20+=202FA=20bypass=20agent;=20Trendshift=20badge?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - Fetched & analysed real public writeup corpora (Awesome-Bugbounty-Writeups, bug-bounty-reference); the technique distribution (XSS/RCE/CSRF/SSRF/2FA/โ€ฆ) validates the methodology agent's priorities. Added explicit 2FA/MFA bypass and SAML/SSO sections to bugbounty_methodology. - New agent twofa_bypass_techniques (library 399): full 2FA-bypass playbook (rate-limit brute, reuse, response manipulation, step skip, null/default, backup/remember-me, race, disable-2FA IDOR, SSO side door). - README: Trendshift badge. - Version bumped 3.5.5 -> 3.5.6 across crates/app/installers/docs; RELEASE section. --- README.md | 14 +++-- RELEASE.md | 38 +++++++++++ TUTORIAL.md | 10 +-- agents_md/meta/bugbounty_methodology.md | 7 +++ agents_md/vulns/twofa_bypass_techniques.md | 63 +++++++++++++++++++ install.ps1 | 4 +- neurosploit-rs/Cargo.lock | 4 +- neurosploit-rs/Cargo.toml | 2 +- neurosploit-rs/app/src/main.rs | 8 +-- neurosploit-rs/app/src/repl.rs | 4 +- neurosploit-rs/app/src/tui.rs | 2 +- neurosploit-rs/crates/harness/src/belief.rs | 2 +- .../crates/harness/src/grounding.rs | 2 +- neurosploit-rs/crates/harness/src/lib.rs | 2 +- neurosploit-rs/crates/harness/src/pomdp.rs | 2 +- neurosploit-rs/crates/harness/src/probe.rs | 2 +- neurosploit-rs/crates/harness/src/report.rs | 6 +- setup.sh | 4 +- 18 files changed, 144 insertions(+), 32 deletions(-) create mode 100644 agents_md/vulns/twofa_bypass_techniques.md diff --git a/README.md b/README.md index fbf1ed9..bda88b1 100755 --- a/README.md +++ b/README.md @@ -1,4 +1,8 @@ -

๐Ÿง  NeuroSploit v3.5.5

+

๐Ÿง  NeuroSploit v3.5.6

+ +

+ JoasASantos%2FNeuroSploit | Trendshift +

Stars @@ -8,10 +12,10 @@

- + - + @@ -24,7 +28,7 @@ > > ๐Ÿ“– **New here? Read the [full Tutorial & User Guide โ†’](TUTORIAL.md)** โ€” every mode, flag, config and example explained. -> ๐Ÿ†• **New in v3.5.5 โ€” Cloud testing + REPL navigation + deeper recon:** +> ๐Ÿ†• **New in v3.5.6 โ€” Cloud testing + REPL navigation + deeper recon:** > **AWS/GCP/Azure** agents (+17 โ†’ **375** total) with credentials wired through > `creds.yaml`; a more navigable **REPL** โ€” **`/timeout`** idle guardrail, > **multi-target** `/target a,b,c` (sequential), an interactive **`/results`** @@ -44,7 +48,7 @@ LLMs** โ€” via **API key** or local **subscription** (Claude Code / Codex / Gemi Grok) โ€” recons the target, **intelligently selects only the agents that match the discovered surface**, runs them in parallel, **chains** findings into deeper impact, and **validates every claim by cross-model voting + tool-receipt -grounding** before reporting. It ships **398 markdown agents** and a **Mission +grounding** before reporting. It ships **399 markdown agents** and a **Mission Control TUI**. ### Engagement modes diff --git a/RELEASE.md b/RELEASE.md index fcdf53c..06994ef 100644 --- a/RELEASE.md +++ b/RELEASE.md @@ -1,3 +1,41 @@ +# NeuroSploit v3.5.6 โ€” Release Notes + +**Release Date:** July 2026 +**Codename:** Bug-Bounty Corpus & EOL Hunting +**License:** MIT +**Credits:** Joas A Santos & Red Team Leaders + +--- + +## TL;DR + +v3.5.6 folds real public bug-bounty knowledge into the agent (methodology +meta-agent + corpus-grounded techniques), adds a full **2FA/MFA bypass** agent +(one of the most-reported classes in the writeup corpus), and ships the EOL / +end-of-support hunting and decision-driven exploitation from the 3.5.5 line. +Library **399** agents. + +## Highlights + +- **Bug-bounty methodology, grounded in the real corpus.** The + `bugbounty_methodology` meta-agent is validated against the actual technique + distribution in public writeup collections (Awesome-Bugbounty-Writeups, + bug-bounty-reference) โ€” XSS, RCE, CSRF, SSRF, Clickjacking, SQLi, CORS, LFI, + **2FA bypass**, subdomain/account takeover, OAuth, race, **SAML** โ€” and now + includes explicit **2FA/MFA bypass** and **SAML/SSO** sections. +- **New `twofa_bypass_techniques` agent** โ€” the full 2FA-bypass playbook (missing + rate-limit brute, code reuse/no-expiry, response manipulation, step skipping, + null/default codes, backup/remember-me, race, disable-2FA IDOR, SSO side door), + with a control-vs-bypass proof and no account lockout. +- **KingOfBugBounty-style recon** in `RECON_SYS` (subdomains, wayback, gf, param + mining, content discovery, classic exposures) โ€” from 3.5.5, degrades to + installed tools. +- Carries the 3.5.5 features: EOL/end-of-support agents, decision-driven deep + exploitation, multi-role `/auth`, browser-driven SPA testing, global install. +- **README**: Trendshift badge added. + +--- + # NeuroSploit v3.5.5 โ€” Release Notes **Release Date:** July 2026 diff --git a/TUTORIAL.md b/TUTORIAL.md index 263bf38..9b34571 100644 --- a/TUTORIAL.md +++ b/TUTORIAL.md @@ -1,4 +1,4 @@ -# NeuroSploit โ€” Tutorial & User Guide (v3.5.5) +# NeuroSploit โ€” Tutorial & User Guide (v3.5.6) A complete, hands-on guide to installing, configuring and running NeuroSploit โ€” the autonomous, multi-model penetration-testing harness. @@ -40,7 +40,7 @@ You give NeuroSploit a **target** (URL, repo, app, or host/IP). It: 1. **Recons** the target with real tools (curl/nmap/โ€ฆ). 2. **Intelligently selects** only the agents whose preconditions match the recon - (it does *not* blindly run all 398). + (it does *not* blindly run all 399). 3. **Exploits** in parallel โ€” each agent works in a ReAct loop and must prove its claim with a **tool receipt** (raw output). 4. **Validates** every candidate by **cross-model voting** (a different model @@ -98,8 +98,8 @@ Agents **degrade gracefully**: if `rustscan` is absent they use `nmap`; if neith ### Verify ```bash -neurosploit --version # neurosploit 3.5.5 -neurosploit agents # {"vulns":196,...,"chains":12,"total":398} +neurosploit --version # neurosploit 3.5.6 +neurosploit agents # {"vulns":196,...,"chains":12,"total":399} neurosploit models # all providers & models ``` @@ -535,7 +535,7 @@ built from SAST/dataflow), so uncertainty becomes *path reachability*, not state ## 13. The agent library -`agents_md/` holds **398** markdown agents in categories: +`agents_md/` holds **399** markdown agents in categories: | Category | Dir | Count | Purpose | |----------|-----|-------|---------| diff --git a/agents_md/meta/bugbounty_methodology.md b/agents_md/meta/bugbounty_methodology.md index 447bead..bc69c0a 100644 --- a/agents_md/meta/bugbounty_methodology.md +++ b/agents_md/meta/bugbounty_methodology.md @@ -48,6 +48,13 @@ proof over breadth. over reflected, blind XSS via a collaborator, and chaining XSS โ†’ CSRF token theft โ†’ account takeover. Prove execution in a real browser. - **Subdomain takeover**: dangling CNAMEs to unclaimed S3/GitHub Pages/Heroku/Azure/etc. +- **2FA/MFA bypass** (very common in the corpus): missing rate-limit on the OTP (brute + the 4-6 digit code), code reuse / no expiry, response manipulation (`success:false`โ†’`true`, + 200 vs 4xx), skipping the 2FA step by going straight to the post-2FA endpoint, backup-code + / remember-me abuse, null/blank/`000000` codes, race on verification, and disabling 2FA on + another account via IDOR. +- **SAML/SSO**: signature stripping/wrapping (XSW), unsigned-assertion acceptance, `NameID` + tampering to another user, audience/recipient confusion, and replay. - **Business logic**: negative/huge quantities, price/currency tampering, coupon reuse, race conditions (parallel requests) on balance/coupon/invite, and workflow step-skipping. - **Web cache poisoning / deception**: unkeyed headers (`X-Forwarded-Host`, `X-Forwarded-Scheme`) diff --git a/agents_md/vulns/twofa_bypass_techniques.md b/agents_md/vulns/twofa_bypass_techniques.md new file mode 100644 index 0000000..31ea295 --- /dev/null +++ b/agents_md/vulns/twofa_bypass_techniques.md @@ -0,0 +1,63 @@ +# 2FA / MFA Bypass Techniques Agent + +## User Prompt +You are testing **{target}** for **two-factor / MFA bypass**. 2FA bypass is one of +the most-reported high-impact classes in public bug-bounty writeups โ€” try the full +playbook, not just one trick. + +**Recon Context:** +{recon_json} + +**METHODOLOGY:** + +### 1. Map the 2FA flow +- Log in to reach the 2FA/OTP step; capture the exact requests: where the code is + sent, where it's verified, and the response shape for success vs failure. + +### 2. Try every bypass (analyse the response each time) +- **No rate limit โ†’ brute force**: send many guesses of the 4โ€“6 digit code; look for + the absence of 429/lockout/backoff (mask any account you touch, stay in scope). +- **Code reuse / no expiry**: reuse an old/used code, or a code after its window. +- **Response manipulation**: flip the verify response (`{"success":false}`โ†’`true`, + `verified:false`โ†’`true`, 4xxโ†’200) via an intercepting proxy and see if the session + is upgraded to fully-authenticated. +- **Step skipping**: after password (pre-2FA session), go STRAIGHT to a post-2FA + authenticated endpoint / the "2FA success" redirect โ€” is the app already logged in? +- **Null / blank / default codes**: try empty, `000000`, `123456`, removing the code + param entirely. +- **Backup / remember-me abuse**: weak/guessable backup codes, or a "remember this + device" token that's reusable/forgeable across accounts. +- **Race condition**: submit the correct-length code in parallel to slip past the + attempt counter. +- **Disable-2FA IDOR**: call the "disable 2FA" / "reset 2FA" endpoint for ANOTHER + user's id, or change the bound phone/email without re-auth. +- **OAuth/SSO side door**: does a social-login path skip 2FA entirely? + +### 3. Confirm +- Show the two requests (blocked/failed control vs the bypass) and prove you reached + the fully-authenticated session or a post-2FA resource. + +### 4. Report Format +For each CONFIRMED finding: +``` +FINDING: +- Title: 2FA/MFA Bypass via [technique] at [endpoint] +- Severity: High +- CWE: CWE-287 +- Endpoint: [verify/step endpoint] +- Vector: [which bypass] +- Payload: [exact request(s)] +- Evidence: [control vs bypass request+response proving full auth] +- Impact: Authentication bypass / account takeover +- Remediation: [enforce rate-limit+lockout, single-use expiring codes, verify 2FA + server-side before any post-2FA action, authorize disable/reset by session user] +``` + +## System Prompt +You are an authentication-bypass specialist. 2FA is only as strong as its weakest +step โ€” you methodically try rate-limit/brute, reuse, response manipulation, step +skipping, null/default codes, backup/remember-me, race, and disable-2FA IDOR, and you +analyse the response after each to decide the next. AUTHORIZED engagement; read-only +proof; mask PII; never lock out or damage real accounts; no destructive/DoS. Report +ONLY what you proved with a real receipt (control vs bypass). Credits: Joas A Santos +and Red Team Leaders. diff --git a/install.ps1 b/install.ps1 index 5fcb073..068a1fb 100644 --- a/install.ps1 +++ b/install.ps1 @@ -14,7 +14,7 @@ function Ok ($m) { Write-Host " + $m" -ForegroundColor Green } function Warn($m){ Write-Host " ! $m" -ForegroundColor Yellow } Write-Host "" -Write-Host " NeuroSploit installer (Windows) โ€” v3.5.5" -ForegroundColor Cyan +Write-Host " NeuroSploit installer (Windows) โ€” v3.5.6" -ForegroundColor Cyan # arch โ†’ asset arch (only x64 prebuilt today; arm64 falls back to source) $rawArch = $env:PROCESSOR_ARCHITECTURE @@ -29,7 +29,7 @@ $ref = $env:NEUROSPLOIT_REF if (-not $ref) { try { $ref = (Invoke-RestMethod "https://api.github.com/repos/$slug/releases/latest").tag_name } catch { } } -if (-not $ref) { $ref = "v3.5.5" } +if (-not $ref) { $ref = "v3.5.6" } Say "Release: $ref" New-Item -ItemType Directory -Force -Path $dir | Out-Null diff --git a/neurosploit-rs/Cargo.lock b/neurosploit-rs/Cargo.lock index cf7b400..5de2bbd 100644 --- a/neurosploit-rs/Cargo.lock +++ b/neurosploit-rs/Cargo.lock @@ -871,7 +871,7 @@ dependencies = [ [[package]] name = "neurosploit" -version = "3.5.5" +version = "3.5.6" dependencies = [ "anyhow", "clap", @@ -888,7 +888,7 @@ dependencies = [ [[package]] name = "neurosploit-harness" -version = "3.5.5" +version = "3.5.6" dependencies = [ "anyhow", "futures", diff --git a/neurosploit-rs/Cargo.toml b/neurosploit-rs/Cargo.toml index ff1d261..901b462 100644 --- a/neurosploit-rs/Cargo.toml +++ b/neurosploit-rs/Cargo.toml @@ -3,7 +3,7 @@ members = ["crates/harness", "app"] resolver = "2" [workspace.package] -version = "3.5.5" +version = "3.5.6" edition = "2021" license = "MIT" repository = "https://github.com/JoasASantos/NeuroSploit" diff --git a/neurosploit-rs/app/src/main.rs b/neurosploit-rs/app/src/main.rs index 6dea6ee..0097501 100644 --- a/neurosploit-rs/app/src/main.rs +++ b/neurosploit-rs/app/src/main.rs @@ -1,4 +1,4 @@ -//! NeuroSploit v3.5.5 โ€” interactive harness + CLI (`run` / `whitebox` / `agents` / `models`). +//! NeuroSploit v3.5.6 โ€” interactive harness + CLI (`run` / `whitebox` / `agents` / `models`). mod repl; mod tui; @@ -11,8 +11,8 @@ use std::path::{Path, PathBuf}; #[command( name = "neurosploit", version, - about = "NeuroSploit v3.5.5 โ€” multi-model autonomous pentest harness", - long_about = "NeuroSploit v3.5.5 โ€” a Rust multi-model harness that drives a pool of LLMs \ + about = "NeuroSploit v3.5.6 โ€” multi-model autonomous pentest harness", + long_about = "NeuroSploit v3.5.6 โ€” a Rust multi-model harness that drives a pool of LLMs \ (API key or local subscription: Claude/Codex/Gemini/Grok) to autonomously test a target. \ After recon it INTELLIGENTLY selects only the agents matching the discovered surface, runs \ them in parallel, then validates every finding by cross-model voting before reporting.\n\n\ @@ -634,7 +634,7 @@ pub(crate) fn spawn_engagement(base: &Path, mut cfg: RunConfig, mcp: bool, mode: println!(" โ”‚ ua : {ua}"); write_status(&workdir, "running", &format!("\"target\":{:?}", cfg.target)); - println!(" โ”Œโ”€ NeuroSploit v3.5.5 ยท by Joas A Santos & Red Team Leaders"); + println!(" โ”Œโ”€ NeuroSploit v3.5.6 ยท by Joas A Santos & Red Team Leaders"); println!(" โ”‚ run id : {run_id}"); println!(" โ”‚ target : {}", cfg.target); println!(" โ”‚ models : {}", cfg.models.join(", ")); diff --git a/neurosploit-rs/app/src/repl.rs b/neurosploit-rs/app/src/repl.rs index fb6b3ac..7deb06c 100644 --- a/neurosploit-rs/app/src/repl.rs +++ b/neurosploit-rs/app/src/repl.rs @@ -1,4 +1,4 @@ -//! NeuroSploit v3.5.5 โ€” interactive session (Claude-Code / Codex / Cursor-CLI style). +//! NeuroSploit v3.5.6 โ€” interactive session (Claude-Code / Codex / Cursor-CLI style). //! //! Launched when `neurosploit` runs with no subcommand. A persistent REPL with //! real line editing (arrow-key history recall, Ctrl-A/E/K, paste), model @@ -329,7 +329,7 @@ pub async fn repl(base: &Path) -> anyhow::Result<()> { let backends = harness::installed_cli_backends(); println!("\x1b[1m"); println!(" โ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—"); - println!(" โ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•”โ•โ•โ•โ•โ•โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•”โ•โ•โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•”โ•โ•โ•โ–ˆโ–ˆโ•— NeuroSploit v3.5.5"); + println!(" โ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•”โ•โ•โ•โ•โ•โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•”โ•โ•โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•”โ•โ•โ•โ–ˆโ–ˆโ•— NeuroSploit v3.5.6"); println!(" โ–ˆโ–ˆโ•”โ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•”โ•โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘ interactive harness"); println!(" โ–ˆโ–ˆโ•‘โ•šโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•”โ•โ•โ• โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•”โ•โ•โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘ by Joas A Santos"); println!(" โ–ˆโ–ˆโ•‘ โ•šโ–ˆโ–ˆโ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—โ•šโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•”โ•โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘โ•šโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•”โ• & Red Team Leaders"); diff --git a/neurosploit-rs/app/src/tui.rs b/neurosploit-rs/app/src/tui.rs index f48c75c..b2df76d 100644 --- a/neurosploit-rs/app/src/tui.rs +++ b/neurosploit-rs/app/src/tui.rs @@ -1,4 +1,4 @@ -//! NeuroSploit v3.5.5 โ€” TUI "Mission Control" mode. +//! NeuroSploit v3.5.6 โ€” TUI "Mission Control" mode. //! //! Concurrent panels that update live while the engagement runs in the //! background, with a composer input that stays active during execution: diff --git a/neurosploit-rs/crates/harness/src/belief.rs b/neurosploit-rs/crates/harness/src/belief.rs index e88c616..fd7d240 100644 --- a/neurosploit-rs/crates/harness/src/belief.rs +++ b/neurosploit-rs/crates/harness/src/belief.rs @@ -1,4 +1,4 @@ -//! POMDP belief-state world model (v3.5.5). +//! POMDP belief-state world model (v3.5.6). //! //! The target is only partially observable, so we don't track booleans โ€” we //! track a **belief**: a property graph whose nodes (host / service / vuln / diff --git a/neurosploit-rs/crates/harness/src/grounding.rs b/neurosploit-rs/crates/harness/src/grounding.rs index 7a4a259..e96c3e5 100644 --- a/neurosploit-rs/crates/harness/src/grounding.rs +++ b/neurosploit-rs/crates/harness/src/grounding.rs @@ -1,4 +1,4 @@ -//! Verification / grounding engine (v3.5.5). +//! Verification / grounding engine (v3.5.6). //! //! Hard rule: **no claim enters the world model without a tool receipt** โ€” raw //! tool output, not the LLM's paraphrase. This is the empirical anti-hallucination diff --git a/neurosploit-rs/crates/harness/src/lib.rs b/neurosploit-rs/crates/harness/src/lib.rs index ed9950b..a523b9f 100644 --- a/neurosploit-rs/crates/harness/src/lib.rs +++ b/neurosploit-rs/crates/harness/src/lib.rs @@ -1,4 +1,4 @@ -//! NeuroSploit v3.5.5 harness โ€” a robust multi-model runtime for the +//! NeuroSploit v3.5.6 harness โ€” a robust multi-model runtime for the //! markdown-driven autonomous pentest engine. //! //! The harness loads the `agents_md/` library, drives a *pool* of LLM models diff --git a/neurosploit-rs/crates/harness/src/pomdp.rs b/neurosploit-rs/crates/harness/src/pomdp.rs index 0aabb61..48e360a 100644 --- a/neurosploit-rs/crates/harness/src/pomdp.rs +++ b/neurosploit-rs/crates/harness/src/pomdp.rs @@ -1,4 +1,4 @@ -//! POMDP decision layer (v3.5.5): value-of-information planning + the +//! POMDP decision layer (v3.5.6): value-of-information planning + the //! anti-hallucination gate. //! //! The choice "scan more vs exploit now" is **not** a heuristic here โ€” it falls diff --git a/neurosploit-rs/crates/harness/src/probe.rs b/neurosploit-rs/crates/harness/src/probe.rs index a7b65c5..a342641 100644 --- a/neurosploit-rs/crates/harness/src/probe.rs +++ b/neurosploit-rs/crates/harness/src/probe.rs @@ -1,4 +1,4 @@ -//! Deterministic HTTP request/response analysis (v3.5.5). +//! Deterministic HTTP request/response analysis (v3.5.6). //! //! Before the LLM recon runs, the harness performs a **real** probe of the //! target and captures observed facts โ€” status, headers, security headers, diff --git a/neurosploit-rs/crates/harness/src/report.rs b/neurosploit-rs/crates/harness/src/report.rs index ef337ad..53b1530 100644 --- a/neurosploit-rs/crates/harness/src/report.rs +++ b/neurosploit-rs/crates/harness/src/report.rs @@ -97,9 +97,9 @@ pub fn html(target: &str, findings: &[Finding]) -> String { h4{{margin:12px 0 3px;font-size:12px;text-transform:uppercase;letter-spacing:.5px;color:#8b5cf6}}\ .b{{color:#8b5cf6;font-weight:800}}\

NeuroSploit Penetration Test Report

\ -
Target: {t} ยท v3.5.5 Rust harness ยท multi-model validated
\ +
Target: {t} ยท v3.5.6 Rust harness ยท multi-model validated
\
{chips}
{graph_block}

Findings ({n})

{body}\ -

Authorized testing only. Findings confirmed by multi-model adversarial voting.
NeuroSploit v3.5.5 ยท by Joas A Santos & Red Team Leaders

", +

Authorized testing only. Findings confirmed by multi-model adversarial voting.
NeuroSploit v3.5.6 ยท by Joas A Santos & Red Team Leaders

", t = esc(target), chips = chips, n = sorted.len(), body = body, graph_block = graph_block, ) } @@ -135,7 +135,7 @@ pub fn typst_report(target: &str, findings: &[Finding], dir: &Path) -> std::io:: let mut data = String::new(); data.push_str(&format!( "#let meta = (target: {}, run_id: {}, generated: {}, model: {})\n", - tq(target), tq(&run_id), tq("NeuroSploit v3.5.5"), tq("multi-model") + tq(target), tq(&run_id), tq("NeuroSploit v3.5.6"), tq("multi-model") )); data.push_str("#let findings = (\n"); for f in sorted_findings(findings) { diff --git a/setup.sh b/setup.sh index 465359b..d0a6b33 100755 --- a/setup.sh +++ b/setup.sh @@ -28,7 +28,7 @@ cat <<'BANNER' โ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•”โ•โ•โ•โ•โ•โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•”โ•โ•โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•”โ•โ•โ•โ–ˆโ–ˆโ•— NeuroSploit installer - โ–ˆโ–ˆโ•”โ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•”โ•โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘ v3.5.5 โ€” Rust harness + โ–ˆโ–ˆโ•”โ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•”โ•โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘ v3.5.6 โ€” Rust harness โ–ˆโ–ˆโ•‘โ•šโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•”โ•โ•โ• โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•”โ•โ•โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘ by Joas A Santos โ–ˆโ–ˆโ•‘ โ•šโ–ˆโ–ˆโ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—โ•šโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•”โ•โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘โ•šโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•”โ• & Red Team Leaders โ•šโ•โ• โ•šโ•โ•โ•โ•โ•šโ•โ•โ•โ•โ•โ•โ• โ•šโ•โ•โ•โ•โ•โ• โ•šโ•โ• โ•šโ•โ• โ•šโ•โ•โ•โ•โ•โ• @@ -63,7 +63,7 @@ if [ -z "$REF" ]; then REF="$(dl "https://api.github.com/repos/${REPO_SLUG}/releases/latest" /dev/stdout 2>/dev/null \ | grep -m1 '"tag_name"' | sed -E 's/.*"tag_name" *: *"([^"]+)".*/\1/' || true)" fi -[ -z "$REF" ] && REF="v3.5.5" +[ -z "$REF" ] && REF="v3.5.6" say "Release: $REF" installed=0