release: v4.3.1

Subscription/model and web-console fixes plus GLM and API-collection support
since 4.3.0:
- force subscription CLI login (strip stray ANTHROPIC/OPENAI keys); add
  claude-opus-4-6
- scope: don't treat an endpoint's HTTP method as its host (findings no longer
  wrongly quarantined; no bogus graph HOST nodes)
- web: resolve run-id to live job, collapse the pinned-leads header, parse live
  findings/agent progress from decorated REPL output
- GLM 5.1/5.2/5.3 via API and via the Claude Code CLI (Z.ai devpack)
- import a Postman/OpenAPI/HAR collection as test surface (CLI/REPL/web)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
CyberSecurityUPandClaude Opus 4.8 committed 2026-10-15 20:38:35 -03:00
1 parent 773f195ba1
commit ac8bba842e
10 files changed
+21 -21

No files matched your search

+2 -2
View File
@@ -1,4 +1,4 @@
<h1 align="center">🧠 NeuroSploit v4.3.0</h1>
<h1 align="center">🧠 NeuroSploit v4.3.1</h1>
<p align="center">
<a href="https://github.com/JoasASantos/NeuroSploit/stargazers"><img src="https://img.shields.io/github/stars/JoasASantos/NeuroSploit?style=for-the-badge&logo=github&color=8b5cf6" alt="Stars"></a>
@@ -7,7 +7,7 @@
</p>
<p align="center">
<img src="https://img.shields.io/badge/Version-4.3.0-blue?style=flat-square">
<img src="https://img.shields.io/badge/Version-4.3.1-blue?style=flat-square">
<img src="https://img.shields.io/badge/Harness-Rust%20%7C%20tokio-e6b673?style=flat-square">
<img src="https://img.shields.io/badge/License-MIT-green?style=flat-square">
<img src="https://img.shields.io/badge/MD%20Agents-486-red?style=flat-square">
+3 -3
View File
@@ -1,4 +1,4 @@
# NeuroSploit — Tutorial & User Guide (v4.3.0)
# NeuroSploit — Tutorial & User Guide (v4.3.1)
A complete, hands-on guide to installing, configuring and running NeuroSploit —
the autonomous, multi-model penetration-testing harness.
@@ -106,7 +106,7 @@ Agents **degrade gracefully**: if `rustscan` is absent they use `nmap`; if neith
### Verify
```bash
neurosploit --version # neurosploit 4.3.0
neurosploit --version # neurosploit 4.3.1
neurosploit agents # {"vulns":255,...,"ai":30,...,"total":480}
neurosploit models # all providers & models
```
@@ -121,7 +121,7 @@ You pick **per run**. They're independent.
Absolute first run, in order:
1. **Install** (section 2) and confirm `neurosploit --version` prints `neurosploit 4.3.0`.
1. **Install** (section 2) and confirm `neurosploit --version` prints `neurosploit 4.3.1`.
2. **Give it a model to talk to** — one of:
- **API key**: export the provider key, e.g. `export ANTHROPIC_API_KEY=sk-ant-...`
(full list below), then run **without** `--subscription`; or
+2 -2
View File
@@ -14,7 +14,7 @@ function Ok ($m) { Write-Host " + $m" -ForegroundColor Green }
function Warn($m){ Write-Host " ! $m" -ForegroundColor Yellow }
Write-Host ""
Write-Host " NeuroSploit installer (Windows) — v4.3.0" -ForegroundColor Cyan
Write-Host " NeuroSploit installer (Windows) — v4.3.1" -ForegroundColor Cyan
# arch → asset arch (only x64 prebuilt today; arm64 falls back to source)
$rawArch = $env:PROCESSOR_ARCHITECTURE
@@ -29,7 +29,7 @@ $ref = $env:NEUROSPLOIT_REF
if (-not $ref) {
try { $ref = (Invoke-RestMethod "https://api.github.com/repos/$slug/releases/latest").tag_name } catch { }
}
if (-not $ref) { $ref = "v4.3.0" }
if (-not $ref) { $ref = "v4.3.1" }
Say "Release: $ref"
New-Item -ItemType Directory -Force -Path $dir | Out-Null
+2 -2
View File
@@ -940,7 +940,7 @@ dependencies = [
[[package]]
name = "neurosploit"
version = "4.3.0"
version = "4.3.1"
dependencies = [
"anyhow",
"clap",
@@ -957,7 +957,7 @@ dependencies = [
[[package]]
name = "neurosploit-harness"
version = "4.3.0"
version = "4.3.1"
dependencies = [
"anyhow",
"base64",
+1 -1
View File
@@ -3,7 +3,7 @@ members = ["crates/harness", "app"]
resolver = "2"
[workspace.package]
version = "4.3.0"
version = "4.3.1"
edition = "2021"
license = "MIT"
repository = "https://github.com/JoasASantos/NeuroSploit"
+2 -2
View File
@@ -13,8 +13,8 @@ use std::path::{Path, PathBuf};
#[command(
name = "neurosploit",
version,
about = "NeuroSploit v4.3.0 — multi-model autonomous pentest harness",
long_about = "NeuroSploit v4.3.0 — a Rust multi-model harness that drives a pool of LLMs \
about = "NeuroSploit v4.3.1 — multi-model autonomous pentest harness",
long_about = "NeuroSploit v4.3.1 — a Rust multi-model harness that drives a pool of LLMs \
(API key or local subscription: Claude/Codex/Gemini/Grok/OpenCode/Hermes) to autonomously test a target. \
After recon it INTELLIGENTLY selects only the agents matching the discovered surface, runs \
them in parallel, then validates every finding by cross-model voting before reporting.\n\n\
+1 -1
View File
@@ -11,7 +11,7 @@ REM Env (optional): NEUROSPLOIT_REF, NEUROSPLOIT_DIR, NEUROSPLOIT_BUILD=1,
REM NEUROSPLOIT_NO_DEPS=1, NEUROSPLOIT_RUN=1
setlocal
echo.
echo NeuroSploit installer (Windows) v4.3.0
echo NeuroSploit installer (Windows) v4.3.1
echo --------------------------------------
where powershell >nul 2>&1
+3 -3
View File
@@ -28,10 +28,10 @@ cat <<'BANNER'
███╗ ██╗███████╗██╗ ██╗██████╗ ██████╗
████╗ ██║██╔════╝██║ ██║██╔══██╗██╔═══██╗ NeuroSploit installer
██╔██╗ ██║█████╗ ██║ ██║██████╔╝██║ ██║ v4.3.0 — Rust harness
██╔██╗ ██║█████╗ ██║ ██║██████╔╝██║ ██║ v4.3.1 — Rust harness
██║╚██╗██║██╔══╝ ██║ ██║██╔══██╗██║ ██║ by Joas A Santos
██║ ╚████║███████╗╚██████╔╝██║ ██║╚██████╔╝ & Red Team Leaders
╚═╝ ╚═══╝╚══════╝ ╚═════╝ ╚═╝ ╚═╝ ╚═════╝ v4.3.0
╚═╝ ╚═══╝╚══════╝ ╚═════╝ ╚═╝ ╚═╝ ╚═════╝ v4.3.1
BANNER
# ---- platform detection (Linux / macOS / Windows-WSL · x64 / arm64) ----
@@ -63,7 +63,7 @@ if [ -z "$REF" ]; then
REF="$(dl "https://api.github.com/repos/${REPO_SLUG}/releases/latest" /dev/stdout 2>/dev/null \
| grep -m1 '"tag_name"' | sed -E 's/.*"tag_name" *: *"([^"]+)".*/\1/' || true)"
fi
[ -z "$REF" ] && REF="v4.3.0"
[ -z "$REF" ] && REF="v4.3.1"
say "Release: $REF"
installed=0
+2 -2
View File
@@ -3,7 +3,7 @@
<head>
<meta charset="utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1" />
<title>NeuroSploit v4.3.0 — Console</title>
<title>NeuroSploit v4.3.1 — Console</title>
<link rel="icon" type="image/svg+xml" href="logo.svg">
<link rel="stylesheet" href="/vendor/xterm.css" />
<link rel="stylesheet" href="/style.css" />
@@ -46,7 +46,7 @@
<div class="sb-groups" id="sbGroups"><!-- populated by app.js --></div>
<div class="sb-bottom">
<span class="sb-version" id="sbVersion">v4.3.0</span>
<span class="sb-version" id="sbVersion">v4.3.1</span>
<div class="sb-bottom-actions">
<button class="icon-btn" id="btnOpenAuth" title="Auth &amp; API keys">🔑</button>
<button class="icon-btn" id="btnOpenRepl" title="Open terminal (Ctrl+`)">❭_</button>
+3 -3
View File
@@ -1,7 +1,7 @@
#!/usr/bin/env node
'use strict';
/**
* NeuroSploit v4.3.0 — web console backend.
* NeuroSploit v4.3.1 — web console backend.
*
* Zero-dependency Node HTTP server that:
* - serves the static SPA in ./public
@@ -1890,7 +1890,7 @@ const server = http.createServer(async (req, res) => {
}
if (req.method === 'GET' && p === '/api/meta') {
return sendJson(res, 200, { version: "4.3.0", binary: BIN, root: ROOT });
return sendJson(res, 200, { version: "4.3.1", binary: BIN, root: ROOT });
}
// ---- providers / API keys (in-memory only, never persisted) ----
@@ -1936,7 +1936,7 @@ const server = http.createServer(async (req, res) => {
loadPersistedJobs();
server.listen(PORT, () => {
console.log(`NeuroSploit v4.3.0 web console → http://localhost:${PORT}`);
console.log(`NeuroSploit v4.3.1 web console → http://localhost:${PORT}`);
console.log(` binary : ${BIN || '(not found — build neurosploit-rs first)'}`);
console.log(` agents : ${AGENTS_DIR}`);
console.log(` runs : ${RUNS_DIR}`);