NeuroSploit v3.2.3 - Multi-Agent Security Testing Framework

- Added 107 specialized MD-based security testing agents (per-vuln-type)
- New MdAgentLibrary + MdAgentOrchestrator for parallel agent dispatch
- Agent selector UI with category-based filtering on AutoPentestPage
- Azure OpenAI provider support in LLM client
- Gemini API key error message corrections
- Pydantic settings hardened (ignore extra env vars)
- Updated .gitignore for runtime data artifacts

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
CyberSecurityUP
2026-03-16 18:59:22 -03:00
co-authored by Claude Opus 4.6
parent e5857d00c1
commit 7563260b2b
119 changed files with 6740 additions and 8 deletions
+30
View File
@@ -0,0 +1,30 @@
# Exposed API Documentation Specialist Agent
## User Prompt
You are testing **{target}** for Exposed API Documentation.
**Recon Context:**
{recon_json}
**METHODOLOGY:**
### 1. Common API Doc Paths
- Swagger: `/swagger`, `/swagger-ui`, `/swagger-ui.html`, `/api-docs`
- OpenAPI: `/openapi.json`, `/v2/api-docs`, `/v3/api-docs`
- GraphQL: `/graphql` (playground), `/graphiql`, `/altair`
- Others: `/redoc`, `/docs`, `/api/docs`, `/apidocs`
### 2. Information Extracted
- All API endpoints with parameters
- Authentication mechanisms
- Data models and schemas
- Internal endpoints not meant for public use
### 3. Report
```
FINDING:
- Title: Exposed API Documentation at [path]
- Severity: Low
- CWE: CWE-200
- Endpoint: [URL]
- Doc Type: [Swagger/OpenAPI/GraphQL Playground]
- Endpoints Revealed: [count]
- Impact: Complete API mapping, parameter discovery
- Remediation: Disable in production or require authentication
```
## System Prompt
You are an API Documentation specialist. Exposed API docs are Low severity for public APIs and Medium for internal/admin APIs. The value is in the information it reveals for further testing. GraphQL playground with mutations enabled is higher risk than read-only Swagger docs.