CalvinBackup/NeuroSploit
1
0 Fork 0
mirror of https://github.com/CyberSecurityUP/NeuroSploit.git synced 2026-10-08 00:51:09 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix(repl): /show displays the real authorized scope + authz ref + pinned agents + research

Browse Source 
/show showed only the policy profile ('web') and hid the actual hard-scope
allowlist, the authorization reference, the pinned agents (/class, /only) and
research mode — so an operator couldn't confirm what was really configured.
Now shows: authorized (the enforced hard-scope hosts, flagged when pinned),
guardrails (rate/accounts/destructive/excludes), authz ref, pinned agent list,
and research in opts.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
CyberSecurityUPandClaude Opus 4.8 committed 2026-10-04 00:51:20 -03:00
1 parent b55778d6f6
commit 35bf7ea1a6
1 file changed
+15 -2
Download Patch File Download Diff File Expand all files Collapse all files
neurosploit-rs/app/src/repl.rs
+15 -2
View File
@@ -2507,9 +2507,22 @@ fn show(s: &Session) {
println!(" │ user-agent: {}", s.user_agent.clone().unwrap_or_else(|| "NeuroSploit (default)".into()));
println!(" │ focus : {}", s.instructions.clone().unwrap_or_else(|| "(none — tests everything)".into()));
println!(" │ objective: {}", s.objective.clone().unwrap_or_else(|| "(none — /objective <goal/context>)".into()));
// The actual authorized hard scope (the allowlist enforced in code), not just
// the policy profile above — this is what /authorize, /scope-file and /inscope set.
let scope_desc = if s.policy.hard.is_empty() {
s.target.clone().map(|t| format!("(derived from target: {})", harness::scope::host_of(&t)))
.unwrap_or_else(|| "(none set — /authorize <hosts> or /target)".into())
} else {
let hosts: Vec<String> = s.policy.hard.iter().map(|p| p.as_text()).collect();
format!("{}{}", hosts.join(", "), if s.scope_pinned { " (pinned)" } else { "" })
};
println!(" │ authorized: {}", scope_desc);
println!(" │ guardrails: {}", s.policy.summary());
println!(" │ out-scope: {}", s.out_of_scope.clone().unwrap_or_else(|| "(none — /scope-out <exclusions>)".into()));
println!(" │ opts : mcp={} offline={} votes={} recon={} chain-depth={} max-agents={} idle-stop={} temp-email={}",
onoff(s.mcp), onoff(s.offline), s.vote_n, s.recon_intensity, s.chain_depth, s.max_agents,
if let Some(a) = &s.authorization { println!(" │ authz ref: {a}"); }
if !s.pinned.is_empty() { println!(" │ pinned : {} agent(s) — {} \x1b[2m(/only clear or /class clear to unpin)\x1b[0m", s.pinned.len(), s.pinned.join(", ")); }
println!(" │ opts : mcp={} offline={} votes={} recon={} chain-depth={} max-agents={} research={} idle-stop={} temp-email={}",
onoff(s.mcp), onoff(s.offline), s.vote_n, s.recon_intensity, s.chain_depth, s.max_agents, onoff(s.research),
if s.idle_secs == 0 { "off".to_string() } else { format!("{}m", s.idle_secs / 60) }, onoff(s.temp_email));
// Integrations at a glance (see /integrations for detail).
{