From ac8bba842e1207874751a023d1253adf8c626072 Mon Sep 17 00:00:00 2001 From: CyberSecurityUP Date: Thu, 15 Oct 2026 20:38:35 -0300 Subject: [PATCH] release: v4.3.1 Subscription/model and web-console fixes plus GLM and API-collection support since 4.3.0: - force subscription CLI login (strip stray ANTHROPIC/OPENAI keys); add claude-opus-4-6 - scope: don't treat an endpoint's HTTP method as its host (findings no longer wrongly quarantined; no bogus graph HOST nodes) - web: resolve run-id to live job, collapse the pinned-leads header, parse live findings/agent progress from decorated REPL output - GLM 5.1/5.2/5.3 via API and via the Claude Code CLI (Z.ai devpack) - import a Postman/OpenAPI/HAR collection as test surface (CLI/REPL/web) Co-Authored-By: Claude Opus 4.8 --- README.md | 4 ++-- TUTORIAL.md | 6 +++--- install.ps1 | 4 ++-- neurosploit-rs/Cargo.lock | 4 ++-- neurosploit-rs/Cargo.toml | 2 +- neurosploit-rs/app/src/main.rs | 4 ++-- setup.bat | 2 +- setup.sh | 6 +++--- web/public/index.html | 4 ++-- web/server.js | 6 +++--- 10 files changed, 21 insertions(+), 21 deletions(-) diff --git a/README.md b/README.md index 41080cd..9c56297 100755 --- a/README.md +++ b/README.md @@ -1,4 +1,4 @@ -

๐Ÿง  NeuroSploit v4.3.0

+

๐Ÿง  NeuroSploit v4.3.1

Stars @@ -7,7 +7,7 @@

- + diff --git a/TUTORIAL.md b/TUTORIAL.md index 681dbe2..cf5d507 100644 --- a/TUTORIAL.md +++ b/TUTORIAL.md @@ -1,4 +1,4 @@ -# NeuroSploit โ€” Tutorial & User Guide (v4.3.0) +# NeuroSploit โ€” Tutorial & User Guide (v4.3.1) A complete, hands-on guide to installing, configuring and running NeuroSploit โ€” the autonomous, multi-model penetration-testing harness. @@ -106,7 +106,7 @@ Agents **degrade gracefully**: if `rustscan` is absent they use `nmap`; if neith ### Verify ```bash -neurosploit --version # neurosploit 4.3.0 +neurosploit --version # neurosploit 4.3.1 neurosploit agents # {"vulns":255,...,"ai":30,...,"total":480} neurosploit models # all providers & models ``` @@ -121,7 +121,7 @@ You pick **per run**. They're independent. Absolute first run, in order: -1. **Install** (section 2) and confirm `neurosploit --version` prints `neurosploit 4.3.0`. +1. **Install** (section 2) and confirm `neurosploit --version` prints `neurosploit 4.3.1`. 2. **Give it a model to talk to** โ€” one of: - **API key**: export the provider key, e.g. `export ANTHROPIC_API_KEY=sk-ant-...` (full list below), then run **without** `--subscription`; or diff --git a/install.ps1 b/install.ps1 index 99f03a1..82bd843 100644 --- a/install.ps1 +++ b/install.ps1 @@ -14,7 +14,7 @@ function Ok ($m) { Write-Host " + $m" -ForegroundColor Green } function Warn($m){ Write-Host " ! $m" -ForegroundColor Yellow } Write-Host "" -Write-Host " NeuroSploit installer (Windows) โ€” v4.3.0" -ForegroundColor Cyan +Write-Host " NeuroSploit installer (Windows) โ€” v4.3.1" -ForegroundColor Cyan # arch โ†’ asset arch (only x64 prebuilt today; arm64 falls back to source) $rawArch = $env:PROCESSOR_ARCHITECTURE @@ -29,7 +29,7 @@ $ref = $env:NEUROSPLOIT_REF if (-not $ref) { try { $ref = (Invoke-RestMethod "https://api.github.com/repos/$slug/releases/latest").tag_name } catch { } } -if (-not $ref) { $ref = "v4.3.0" } +if (-not $ref) { $ref = "v4.3.1" } Say "Release: $ref" New-Item -ItemType Directory -Force -Path $dir | Out-Null diff --git a/neurosploit-rs/Cargo.lock b/neurosploit-rs/Cargo.lock index 36b9df5..b6a4dac 100644 --- a/neurosploit-rs/Cargo.lock +++ b/neurosploit-rs/Cargo.lock @@ -940,7 +940,7 @@ dependencies = [ [[package]] name = "neurosploit" -version = "4.3.0" +version = "4.3.1" dependencies = [ "anyhow", "clap", @@ -957,7 +957,7 @@ dependencies = [ [[package]] name = "neurosploit-harness" -version = "4.3.0" +version = "4.3.1" dependencies = [ "anyhow", "base64", diff --git a/neurosploit-rs/Cargo.toml b/neurosploit-rs/Cargo.toml index b83da20..f710cb0 100644 --- a/neurosploit-rs/Cargo.toml +++ b/neurosploit-rs/Cargo.toml @@ -3,7 +3,7 @@ members = ["crates/harness", "app"] resolver = "2" [workspace.package] -version = "4.3.0" +version = "4.3.1" edition = "2021" license = "MIT" repository = "https://github.com/JoasASantos/NeuroSploit" diff --git a/neurosploit-rs/app/src/main.rs b/neurosploit-rs/app/src/main.rs index 738564b..dd42433 100644 --- a/neurosploit-rs/app/src/main.rs +++ b/neurosploit-rs/app/src/main.rs @@ -13,8 +13,8 @@ use std::path::{Path, PathBuf}; #[command( name = "neurosploit", version, - about = "NeuroSploit v4.3.0 โ€” multi-model autonomous pentest harness", - long_about = "NeuroSploit v4.3.0 โ€” a Rust multi-model harness that drives a pool of LLMs \ + about = "NeuroSploit v4.3.1 โ€” multi-model autonomous pentest harness", + long_about = "NeuroSploit v4.3.1 โ€” a Rust multi-model harness that drives a pool of LLMs \ (API key or local subscription: Claude/Codex/Gemini/Grok/OpenCode/Hermes) to autonomously test a target. \ After recon it INTELLIGENTLY selects only the agents matching the discovered surface, runs \ them in parallel, then validates every finding by cross-model voting before reporting.\n\n\ diff --git a/setup.bat b/setup.bat index a868241..1646370 100644 --- a/setup.bat +++ b/setup.bat @@ -11,7 +11,7 @@ REM Env (optional): NEUROSPLOIT_REF, NEUROSPLOIT_DIR, NEUROSPLOIT_BUILD=1, REM NEUROSPLOIT_NO_DEPS=1, NEUROSPLOIT_RUN=1 setlocal echo. -echo NeuroSploit installer (Windows) v4.3.0 +echo NeuroSploit installer (Windows) v4.3.1 echo -------------------------------------- where powershell >nul 2>&1 diff --git a/setup.sh b/setup.sh index 2004a36..cad489e 100755 --- a/setup.sh +++ b/setup.sh @@ -28,10 +28,10 @@ cat <<'BANNER' โ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•”โ•โ•โ•โ•โ•โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•”โ•โ•โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•”โ•โ•โ•โ–ˆโ–ˆโ•— NeuroSploit installer - โ–ˆโ–ˆโ•”โ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•”โ•โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘ v4.3.0 โ€” Rust harness + โ–ˆโ–ˆโ•”โ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•”โ•โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘ v4.3.1 โ€” Rust harness โ–ˆโ–ˆโ•‘โ•šโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•”โ•โ•โ• โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•”โ•โ•โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘ by Joas A Santos โ–ˆโ–ˆโ•‘ โ•šโ–ˆโ–ˆโ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—โ•šโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•”โ•โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘โ•šโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•”โ• & Red Team Leaders - โ•šโ•โ• โ•šโ•โ•โ•โ•โ•šโ•โ•โ•โ•โ•โ•โ• โ•šโ•โ•โ•โ•โ•โ• โ•šโ•โ• โ•šโ•โ• โ•šโ•โ•โ•โ•โ•โ• v4.3.0 + โ•šโ•โ• โ•šโ•โ•โ•โ•โ•šโ•โ•โ•โ•โ•โ•โ• โ•šโ•โ•โ•โ•โ•โ• โ•šโ•โ• โ•šโ•โ• โ•šโ•โ•โ•โ•โ•โ• v4.3.1 BANNER # ---- platform detection (Linux / macOS / Windows-WSL ยท x64 / arm64) ---- @@ -63,7 +63,7 @@ if [ -z "$REF" ]; then REF="$(dl "https://api.github.com/repos/${REPO_SLUG}/releases/latest" /dev/stdout 2>/dev/null \ | grep -m1 '"tag_name"' | sed -E 's/.*"tag_name" *: *"([^"]+)".*/\1/' || true)" fi -[ -z "$REF" ] && REF="v4.3.0" +[ -z "$REF" ] && REF="v4.3.1" say "Release: $REF" installed=0 diff --git a/web/public/index.html b/web/public/index.html index 8610162..ea537a3 100644 --- a/web/public/index.html +++ b/web/public/index.html @@ -3,7 +3,7 @@ -NeuroSploit v4.3.0 โ€” Console +NeuroSploit v4.3.1 โ€” Console @@ -46,7 +46,7 @@

- v4.3.0 + v4.3.1
diff --git a/web/server.js b/web/server.js index 4346814..8fc16e3 100644 --- a/web/server.js +++ b/web/server.js @@ -1,7 +1,7 @@ #!/usr/bin/env node 'use strict'; /** - * NeuroSploit v4.3.0 โ€” web console backend. + * NeuroSploit v4.3.1 โ€” web console backend. * * Zero-dependency Node HTTP server that: * - serves the static SPA in ./public @@ -1890,7 +1890,7 @@ const server = http.createServer(async (req, res) => { } if (req.method === 'GET' && p === '/api/meta') { - return sendJson(res, 200, { version: "4.3.0", binary: BIN, root: ROOT }); + return sendJson(res, 200, { version: "4.3.1", binary: BIN, root: ROOT }); } // ---- providers / API keys (in-memory only, never persisted) ---- @@ -1936,7 +1936,7 @@ const server = http.createServer(async (req, res) => { loadPersistedJobs(); server.listen(PORT, () => { - console.log(`NeuroSploit v4.3.0 web console โ†’ http://localhost:${PORT}`); + console.log(`NeuroSploit v4.3.1 web console โ†’ http://localhost:${PORT}`); console.log(` binary : ${BIN || '(not found โ€” build neurosploit-rs first)'}`); console.log(` agents : ${AGENTS_DIR}`); console.log(` runs : ${RUNS_DIR}`);