mirror of
https://github.com/CyberSecurityUP/NeuroSploit.git
synced 2026-08-15 22:20:21 +02:00
v3.6.0 — AI/LLM/Agent/MCP/Skills security, n8n audit, onboarding wizard
- New `ai` agent category (agents_md/ai/, +18): OWASP LLM Top 10 (2025) — prompt injection (direct+indirect), jailbreak, system-prompt leak, sensitive-info disclosure, improper output handling, excessive agency, RAG/embedding, unbounded consumption, supply chain, misinformation — plus MCP risks (tool poisoning, excessive permissions/confused-deputy, unsafe tool execution) and Skills/plugin + n8n workflow audits (incl. an AI/LLM-node audit). Library 417. - Pipeline: run_ai (live AI/LLM/MCP red-team) + run_skills_audit (white-box .md/ .json/folder for skills & exported n8n flows), AI_DOCTRINE + AI_RECON_SYS. Mode enum gains Ai/Skills; wired in CLI + TUI. - CLI: `aitest <url>` and `skills <path>` subcommands. `agents` JSON now reports ai. - REPL onboarding wizard (/onboard, auto on first launch): pick scope — web / infra / cloud / ai / skills — then guided setup; Session.scope drives dispatch; shown in /show. - Models: +claude-sonnet-5, +grok-4.5. - Version 3.5.6 -> 3.6.0; docs/counts (417) + RELEASE section.
This commit is contained in:
CyberSecurityUP
@@ -1,4 +1,4 @@
|
||||
//! NeuroSploit v3.5.6 — interactive harness + CLI (`run` / `whitebox` / `agents` / `models`).
|
||||
//! NeuroSploit v3.6.0 — interactive harness + CLI (`run` / `whitebox` / `agents` / `models`).
|
||||
|
||||
mod repl;
|
||||
mod tui;
|
||||
@@ -11,8 +11,8 @@ use std::path::{Path, PathBuf};
|
||||
#[command(
|
||||
name = "neurosploit",
|
||||
version,
|
||||
about = "NeuroSploit v3.5.6 — multi-model autonomous pentest harness",
|
||||
long_about = "NeuroSploit v3.5.6 — a Rust multi-model harness that drives a pool of LLMs \
|
||||
about = "NeuroSploit v3.6.0 — multi-model autonomous pentest harness",
|
||||
long_about = "NeuroSploit v3.6.0 — a Rust multi-model harness that drives a pool of LLMs \
|
||||
(API key or local subscription: Claude/Codex/Gemini/Grok) to autonomously test a target. \
|
||||
After recon it INTELLIGENTLY selects only the agents matching the discovered surface, runs \
|
||||
them in parallel, then validates every finding by cross-model voting before reporting.\n\n\
|
||||
@@ -176,6 +176,44 @@ enum Cmd {
|
||||
#[arg(short, long)]
|
||||
verbose: bool,
|
||||
},
|
||||
/// AI/LLM: red-team a live AI agent / LLM app / MCP endpoint (OWASP LLM Top 10 + MCP risks).
|
||||
Aitest {
|
||||
/// URL of the AI agent / LLM chat or API endpoint.
|
||||
url: String,
|
||||
#[arg(long = "model")]
|
||||
models: Vec<String>,
|
||||
/// Auth header for the AI endpoint (e.g. 'Authorization: Bearer <key>').
|
||||
#[arg(long)]
|
||||
auth: Option<String>,
|
||||
/// Free-text focus, e.g. "prompt injection and excessive agency".
|
||||
#[arg(long)]
|
||||
focus: Option<String>,
|
||||
#[arg(long, default_value_t = 0)]
|
||||
max_agents: usize,
|
||||
#[arg(long, default_value_t = 3)]
|
||||
vote_n: usize,
|
||||
#[arg(long)]
|
||||
offline: bool,
|
||||
#[arg(long)]
|
||||
subscription: bool,
|
||||
#[arg(short, long)]
|
||||
verbose: bool,
|
||||
},
|
||||
/// Audit AI Skills/plugins or exported n8n workflows (white-box .md/.json file or folder).
|
||||
Skills {
|
||||
/// Path to a skill/plugin/n8n file (.md/.json) or a folder of them.
|
||||
path: String,
|
||||
#[arg(long = "model")]
|
||||
models: Vec<String>,
|
||||
#[arg(long, default_value_t = 2)]
|
||||
vote_n: usize,
|
||||
#[arg(long)]
|
||||
offline: bool,
|
||||
#[arg(long)]
|
||||
subscription: bool,
|
||||
#[arg(short, long)]
|
||||
verbose: bool,
|
||||
},
|
||||
/// Review a GitHub Pull Request's code (clones the PR head, white-box).
|
||||
/// Optionally comments back on the PR and/or opens Jira cards per finding.
|
||||
Pr {
|
||||
@@ -299,8 +337,8 @@ async fn main() -> anyhow::Result<()> {
|
||||
Cmd::Agents => {
|
||||
let lib = agents::load(&base);
|
||||
println!(
|
||||
"{{\"vulns\":{},\"recon\":{},\"code\":{},\"infra\":{},\"chains\":{},\"meta\":{},\"total\":{}}}",
|
||||
lib.vulns.len(), lib.recon.len(), lib.code.len(), lib.infra.len(), lib.chains.len(), lib.meta.len(), lib.total()
|
||||
"{{\"vulns\":{},\"recon\":{},\"code\":{},\"infra\":{},\"chains\":{},\"ai\":{},\"meta\":{},\"total\":{}}}",
|
||||
lib.vulns.len(), lib.recon.len(), lib.code.len(), lib.infra.len(), lib.chains.len(), lib.ai.len(), lib.meta.len(), lib.total()
|
||||
);
|
||||
}
|
||||
Cmd::Models => {
|
||||
@@ -399,6 +437,31 @@ async fn main() -> anyhow::Result<()> {
|
||||
let out = run_mode(&base, cfg, false, Mode::Host).await?;
|
||||
print_findings(&out);
|
||||
}
|
||||
Cmd::Aitest { url, models, auth, focus, max_agents, vote_n, offline, subscription, verbose } => {
|
||||
let url = if url.starts_with("http") { url } else { format!("https://{url}") };
|
||||
let mut cfg = RunConfig::new(&url);
|
||||
cfg.max_agents = max_agents;
|
||||
cfg.vote_n = vote_n;
|
||||
cfg.offline = offline;
|
||||
cfg.subscription = subscription;
|
||||
cfg.verbose = verbose;
|
||||
cfg.instructions = focus;
|
||||
cfg.auth = auth;
|
||||
if !models.is_empty() { cfg.models = models; }
|
||||
let out = run_mode(&base, cfg, false, Mode::Ai).await?;
|
||||
print_findings(&out);
|
||||
}
|
||||
Cmd::Skills { path, models, vote_n, offline, subscription, verbose } => {
|
||||
let path = resolve_source(&base, &path)?; // local path OR github URL
|
||||
let mut cfg = RunConfig::new(&path);
|
||||
cfg.vote_n = vote_n;
|
||||
cfg.offline = offline;
|
||||
cfg.subscription = subscription;
|
||||
cfg.verbose = verbose;
|
||||
if !models.is_empty() { cfg.models = models; }
|
||||
let out = run_mode(&base, cfg, false, Mode::Skills).await?;
|
||||
print_findings(&out);
|
||||
}
|
||||
Cmd::Pr { repo, number, models, vote_n, chain_depth, subscription, comment, jira, verbose } => {
|
||||
let ig = harness::integrations::Integrations::load(&repl::proj_dir());
|
||||
let owner_repo = normalize_repo(&repo);
|
||||
@@ -550,7 +613,7 @@ pub(crate) async fn apply_creds(cfg: &mut RunConfig, path: Option<&str>) {
|
||||
}
|
||||
|
||||
#[derive(Clone, Copy, PartialEq)]
|
||||
pub(crate) enum Mode { Black, White, Grey, Host }
|
||||
pub(crate) enum Mode { Black, White, Grey, Host, Ai, Skills }
|
||||
|
||||
pub(crate) async fn run_greybox_engagement(base: &Path, cfg: RunConfig, mcp: bool) -> anyhow::Result<RunOutput> {
|
||||
run_mode(base, cfg, mcp, Mode::Grey).await
|
||||
@@ -634,7 +697,7 @@ pub(crate) fn spawn_engagement(base: &Path, mut cfg: RunConfig, mcp: bool, mode:
|
||||
println!(" │ ua : {ua}");
|
||||
write_status(&workdir, "running", &format!("\"target\":{:?}", cfg.target));
|
||||
|
||||
println!(" ┌─ NeuroSploit v3.5.6 · by Joas A Santos & Red Team Leaders");
|
||||
println!(" ┌─ NeuroSploit v3.6.0 · by Joas A Santos & Red Team Leaders");
|
||||
println!(" │ run id : {run_id}");
|
||||
println!(" │ target : {}", cfg.target);
|
||||
println!(" │ models : {}", cfg.models.join(", "));
|
||||
@@ -643,7 +706,7 @@ pub(crate) fn spawn_engagement(base: &Path, mut cfg: RunConfig, mcp: bool, mode:
|
||||
println!(" │ repo : {}", cfg.repo.clone().unwrap_or_default());
|
||||
}
|
||||
println!(" └─ mode : {}{}{}",
|
||||
match mode { Mode::White => "white-box", Mode::Grey => "greybox", Mode::Host => "host/infra", Mode::Black => "black-box" },
|
||||
match mode { Mode::White => "white-box", Mode::Grey => "greybox", Mode::Host => "host/infra", Mode::Ai => "ai/llm", Mode::Skills => "skills/n8n audit", Mode::Black => "black-box" },
|
||||
if cfg.subscription { " · subscription" } else { " · api" },
|
||||
if mcp { " · mcp" } else { "" });
|
||||
|
||||
@@ -680,6 +743,8 @@ pub(crate) fn spawn_engagement(base: &Path, mut cfg: RunConfig, mcp: bool, mode:
|
||||
Mode::White => harness::run_whitebox(cfg, &lib, &pool, tx).await,
|
||||
Mode::Grey => harness::run_greybox(cfg, &lib, &pool, tx).await,
|
||||
Mode::Host => harness::run_host(cfg, &lib, &pool, tx).await,
|
||||
Mode::Ai => harness::pipeline::run_ai(cfg, &lib, &pool, tx).await,
|
||||
Mode::Skills => harness::pipeline::run_skills_audit(cfg, &lib, &pool, tx).await,
|
||||
Mode::Black => harness::run(cfg, &lib, &pool, tx).await,
|
||||
}
|
||||
});
|
||||
|
||||
+111
-15
@@ -1,4 +1,4 @@
|
||||
//! NeuroSploit v3.5.6 — interactive session (Claude-Code / Codex / Cursor-CLI style).
|
||||
//! NeuroSploit v3.6.0 — interactive session (Claude-Code / Codex / Cursor-CLI style).
|
||||
//!
|
||||
//! Launched when `neurosploit` runs with no subcommand. A persistent REPL with
|
||||
//! real line editing (arrow-key history recall, Ctrl-A/E/K, paste), model
|
||||
@@ -117,7 +117,7 @@ struct LiveCheckpoint {
|
||||
|
||||
/// All slash-commands, for Tab completion.
|
||||
const COMMANDS: &[&str] = &[
|
||||
"/help", "/show", "/config", "/providers", "/model", "/key", "/sub", "/target",
|
||||
"/help", "/onboard", "/show", "/config", "/providers", "/model", "/key", "/sub", "/target",
|
||||
"/repo", "/auth", "/creds", "/focus", "/attach", "/context", "/mcp", "/offline",
|
||||
"/votes", "/chain", "/timeout", "/proxy", "/burp", "/ua", "/agents", "/theme", "/clear", "/run", "/stop", "/continue", "/runs", "/results", "/report",
|
||||
"/status", "/diff", "/retest", "/validate", "/finding", "/expand", "/integrations", "/quit",
|
||||
@@ -231,6 +231,8 @@ struct Session {
|
||||
instructions: Option<String>,
|
||||
attachments: Vec<String>,
|
||||
color: bool,
|
||||
/// Engagement scope from onboarding: web | infra | cloud | ai | skills.
|
||||
scope: &'static str,
|
||||
}
|
||||
|
||||
impl Default for Session {
|
||||
@@ -254,6 +256,7 @@ impl Default for Session {
|
||||
instructions: None,
|
||||
attachments: Vec::new(),
|
||||
color: true,
|
||||
scope: "web",
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -329,7 +332,7 @@ pub async fn repl(base: &Path) -> anyhow::Result<()> {
|
||||
let backends = harness::installed_cli_backends();
|
||||
println!("\x1b[1m");
|
||||
println!(" ███╗ ██╗███████╗██╗ ██╗██████╗ ██████╗");
|
||||
println!(" ████╗ ██║██╔════╝██║ ██║██╔══██╗██╔═══██╗ NeuroSploit v3.5.6");
|
||||
println!(" ████╗ ██║██╔════╝██║ ██║██╔══██╗██╔═══██╗ NeuroSploit v3.6.0");
|
||||
println!(" ██╔██╗ ██║█████╗ ██║ ██║██████╔╝██║ ██║ interactive harness");
|
||||
println!(" ██║╚██╗██║██╔══╝ ██║ ██║██╔══██╗██║ ██║ by Joas A Santos");
|
||||
println!(" ██║ ╚████║███████╗╚██████╔╝██║ ██║╚██████╔╝ & Red Team Leaders");
|
||||
@@ -367,6 +370,10 @@ pub async fn repl(base: &Path) -> anyhow::Result<()> {
|
||||
let mut reader = Reader::new(base);
|
||||
let mut active: Option<ActiveRun> = None;
|
||||
let mut queue: Vec<String> = Vec::new(); // remaining targets for a multi-target /run
|
||||
// First-launch onboarding: pick scope (web/infra/cloud/ai/skills) → box → setup.
|
||||
if s.target.is_none() && s.repo.is_none() && std::io::stdin().is_terminal() {
|
||||
onboarding(&mut s);
|
||||
}
|
||||
show(&s);
|
||||
|
||||
loop {
|
||||
@@ -428,6 +435,7 @@ pub async fn repl(base: &Path) -> anyhow::Result<()> {
|
||||
p.models.iter().map(|m| format!("{}:{}", p.key, m)).collect::<Vec<_>>().join(" "));
|
||||
}
|
||||
}
|
||||
"/onboard" | "/scope" => onboarding(&mut s),
|
||||
"/model" | "/models" => {
|
||||
if arg.is_empty() {
|
||||
pick_models(&mut s);
|
||||
@@ -763,6 +771,71 @@ pub async fn repl(base: &Path) -> anyhow::Result<()> {
|
||||
}
|
||||
|
||||
/// Arrow-key multi-select of models from the catalog (interactive terminals only).
|
||||
/// Onboarding wizard: pick WHAT you're testing (scope) → box type → set it up.
|
||||
/// Sets s.scope + target/repo/creds hints so a plain `/run` does the right thing.
|
||||
fn onboarding(s: &mut Session) {
|
||||
if !std::io::stdin().is_terminal() { return; }
|
||||
let cats = [
|
||||
"Web & API (a website / REST / GraphQL — black/grey/white-box)",
|
||||
"Infrastructure & Networks (an IP / host — Linux / Windows / Active Directory)",
|
||||
"Cloud (AWS / GCP / Azure account via creds.yaml)",
|
||||
"AI Agents & LLMs (a live AI/LLM/MCP endpoint, OWASP LLM Top 10)",
|
||||
"AI Skills / Plugins / n8n (audit exported files — white-box)",
|
||||
"Skip — I'll configure manually",
|
||||
];
|
||||
let ci = match dialoguer::Select::with_theme(&ColorfulTheme::default())
|
||||
.with_prompt("What are you testing? (onboarding — Esc to skip)")
|
||||
.items(&cats).default(0).interact_opt() {
|
||||
Ok(Some(i)) => i, _ => { println!(" (skipped onboarding — /onboard to run it again)"); return; }
|
||||
};
|
||||
match ci {
|
||||
0 => { // Web & API
|
||||
let boxes = ["Black-box (only a URL)", "White-box (source code)", "Grey-box (URL + source code)"];
|
||||
let bi = dialoguer::Select::with_theme(&ColorfulTheme::default())
|
||||
.with_prompt("Box type").items(&boxes).default(0).interact_opt().ok().flatten().unwrap_or(0);
|
||||
s.scope = "web";
|
||||
if bi == 0 || bi == 2 {
|
||||
let u = ask_line(" Target URL:"); if !u.trim().is_empty() {
|
||||
let u = if u.starts_with("http") { u.trim().to_string() } else { format!("https://{}", u.trim()) };
|
||||
s.target = Some(u);
|
||||
}
|
||||
}
|
||||
if bi == 1 || bi == 2 {
|
||||
let p = ask_line(" Source repo (path or GitHub URL):"); if !p.trim().is_empty() { s.repo = Some(p.trim().to_string()); }
|
||||
}
|
||||
println!(" ✓ web ({}) — /run to launch (add /auth, /creds, /focus as needed).",
|
||||
["black-box","white-box","grey-box"][bi.min(2)]);
|
||||
}
|
||||
1 => { // Infra
|
||||
s.scope = "infra";
|
||||
let t = ask_line(" Target host/IP:"); if !t.trim().is_empty() { s.target = Some(t.trim().to_string()); }
|
||||
let c = ask_line(" creds.yaml path (ssh:/windows: blocks) [enter to skip]:"); if !c.trim().is_empty() { s.creds = Some(c.trim().to_string()); }
|
||||
println!(" ✓ infra/host — /run to launch (Linux/Windows/AD agents).");
|
||||
}
|
||||
2 => { // Cloud
|
||||
s.scope = "cloud";
|
||||
let t = ask_line(" Cloud account label / target:"); s.target = Some(if t.trim().is_empty() { "cloud-account".into() } else { t.trim().to_string() });
|
||||
let c = ask_line(" creds.yaml path (aws:/gcp:/azure: blocks):"); if !c.trim().is_empty() { s.creds = Some(c.trim().to_string()); }
|
||||
println!(" ✓ cloud — set aws:/gcp:/azure: in creds.yaml, then /run.");
|
||||
}
|
||||
3 => { // AI live
|
||||
s.scope = "ai";
|
||||
let u = ask_line(" AI agent / LLM / MCP endpoint URL:"); if !u.trim().is_empty() {
|
||||
let u = if u.starts_with("http") { u.trim().to_string() } else { format!("https://{}", u.trim()) };
|
||||
s.target = Some(u);
|
||||
}
|
||||
let a = ask_line(" Auth header for the endpoint [enter to skip]:"); if !a.trim().is_empty() { s.auth = Some(normalize_auth(a.trim())); }
|
||||
println!(" ✓ ai/llm — /run tests OWASP LLM Top 10 + MCP against the endpoint.");
|
||||
}
|
||||
4 => { // Skills / n8n audit (white-box files)
|
||||
s.scope = "skills";
|
||||
let p = ask_line(" Skill/plugin/n8n file or folder (.md/.json):"); if !p.trim().is_empty() { s.repo = Some(p.trim().to_string()); }
|
||||
println!(" ✓ skills/n8n audit — /run audits the exported definition(s).");
|
||||
}
|
||||
_ => { s.scope = "web"; println!(" (manual setup — use /target /repo /creds /auth then /run)"); }
|
||||
}
|
||||
}
|
||||
|
||||
fn pick_models(s: &mut Session) {
|
||||
if !std::io::stdin().is_terminal() {
|
||||
println!(" current: {} (use /model <provider:model,...> to set)", s.models.join(", "));
|
||||
@@ -907,11 +980,26 @@ async fn start_background(base: &Path, s: &Session, reader: &mut Reader,
|
||||
history: Arc<Mutex<Vec<RunRecord>>>, target_override: Option<&str>) -> Option<ActiveRun> {
|
||||
// `target_override` runs one specific URL (used by the multi-target queue).
|
||||
let ov = target_override.map(|t| t.to_string());
|
||||
let (target, mode_s, mode_e, mcp) = match (&s.repo, ov.as_ref().or(s.target.as_ref())) {
|
||||
(Some(_), Some(t)) => (t.clone(), "greybox", crate::Mode::Grey, s.mcp),
|
||||
(Some(r), None) => (r.clone(), "white-box", crate::Mode::White, false),
|
||||
(None, Some(t)) => (t.clone(), "black-box", crate::Mode::Black, s.mcp),
|
||||
_ => { println!(" \x1b[31m✗ set a /target <url> and/or /repo <path> first.\x1b[0m"); return None; }
|
||||
// The onboarding scope steers infra/cloud/ai/skills; otherwise web black/white/grey.
|
||||
let (target, mode_s, mode_e, mcp) = match s.scope {
|
||||
"infra" | "cloud" => match ov.as_ref().or(s.target.as_ref()) {
|
||||
Some(t) => (t.clone(), if s.scope == "cloud" { "cloud" } else { "host/infra" }, crate::Mode::Host, false),
|
||||
None => { println!(" \x1b[31m✗ set a /target <ip|host|cloud-account> first (and /creds).\x1b[0m"); return None; }
|
||||
},
|
||||
"ai" => match ov.as_ref().or(s.target.as_ref()) {
|
||||
Some(t) => (t.clone(), "ai/llm", crate::Mode::Ai, false),
|
||||
None => { println!(" \x1b[31m✗ set the AI endpoint with /target <url> first.\x1b[0m"); return None; }
|
||||
},
|
||||
"skills" => match s.repo.as_ref().or(s.target.as_ref()) {
|
||||
Some(p) => (p.clone(), "skills/n8n", crate::Mode::Skills, false),
|
||||
None => { println!(" \x1b[31m✗ set the skill/n8n file or folder with /repo <path> first.\x1b[0m"); return None; }
|
||||
},
|
||||
_ => match (&s.repo, ov.as_ref().or(s.target.as_ref())) {
|
||||
(Some(_), Some(t)) => (t.clone(), "greybox", crate::Mode::Grey, s.mcp),
|
||||
(Some(r), None) => (r.clone(), "white-box", crate::Mode::White, false),
|
||||
(None, Some(t)) => (t.clone(), "black-box", crate::Mode::Black, s.mcp),
|
||||
_ => { println!(" \x1b[31m✗ set a /target <url> and/or /repo <path> first.\x1b[0m"); return None; }
|
||||
},
|
||||
};
|
||||
let idle_secs = s.idle_secs;
|
||||
let mut cfg = RunConfig::new(&target);
|
||||
@@ -1355,13 +1443,20 @@ fn run_status(history: &[RunRecord], arg: &str) {
|
||||
}
|
||||
|
||||
fn show(s: &Session) {
|
||||
let mode = match (&s.repo, &s.target) {
|
||||
(Some(_), Some(_)) => "greybox (code + live)",
|
||||
(Some(_), None) => "white-box (code)",
|
||||
(None, Some(_)) => "black-box (live)",
|
||||
_ => "(set /target and/or /repo)",
|
||||
let mode = match s.scope {
|
||||
"infra" => "infra/host (Linux/Windows/AD)",
|
||||
"cloud" => "cloud (AWS/GCP/Azure)",
|
||||
"ai" => "ai/llm (OWASP LLM Top 10 + MCP)",
|
||||
"skills" => "skills/n8n audit (white-box files)",
|
||||
_ => match (&s.repo, &s.target) {
|
||||
(Some(_), Some(_)) => "greybox (code + live)",
|
||||
(Some(_), None) => "white-box (code)",
|
||||
(None, Some(_)) => "black-box (live)",
|
||||
_ => "(set /target and/or /repo — or /onboard)",
|
||||
},
|
||||
};
|
||||
println!(" ┌─ session");
|
||||
println!(" │ scope : {} \x1b[2m(/onboard to change)\x1b[0m", s.scope);
|
||||
println!(" │ models : {}", s.models.join(", "));
|
||||
println!(" │ auth mode: {}", if s.subscription { "subscription (CLI login)" } else { "API key" });
|
||||
println!(" │ mode : {mode}");
|
||||
@@ -1403,8 +1498,9 @@ fn help() {
|
||||
println!("\n \x1b[1mNeuroSploit REPL — commands\x1b[0m");
|
||||
|
||||
println!("\n \x1b[2mTARGET & SCOPE\x1b[0m");
|
||||
h("/target <url[,..]>", "black-box target URL (comma-separated = multi-target, sequential)");
|
||||
h("/repo <path|url>", "analyse a repo — path or GitHub URL (repo + target = greybox)");
|
||||
h("/onboard", "guided setup: pick scope (web · infra · cloud · ai/llm · skills/n8n)");
|
||||
h("/target <url[,..]>", "black-box target / AI endpoint / host (comma-separated = multi-target)");
|
||||
h("/repo <path|url>", "source repo (greybox) OR skill/n8n file/folder to audit (skills scope)");
|
||||
h("/auth <value>", "auth header (Bearer/cookie/key). Roles: /auth admin <hdr> · /auth user <hdr>");
|
||||
h("/creds <file.yaml>", "creds: jwt/header/cookie/login + ssh/windows + aws/gcp/azure + roles");
|
||||
h("/focus <text>", "steer the tests (or just type the instruction)");
|
||||
|
||||
@@ -1,4 +1,4 @@
|
||||
//! NeuroSploit v3.5.6 — TUI "Mission Control" mode.
|
||||
//! NeuroSploit v3.6.0 — TUI "Mission Control" mode.
|
||||
//!
|
||||
//! Concurrent panels that update live while the engagement runs in the
|
||||
//! background, with a composer input that stays active during execution:
|
||||
@@ -148,7 +148,7 @@ pub async fn run(base: &Path, mut cfg: RunConfig, mcp: bool, mode: Mode) -> anyh
|
||||
|
||||
let (tx, mut rx) = tokio::sync::mpsc::channel::<String>(512);
|
||||
let models = cfg.models.join(", ");
|
||||
let mode_s = match mode { Mode::White => "white-box", Mode::Grey => "greybox", Mode::Host => "host/infra", Mode::Black => "black-box" };
|
||||
let mode_s = match mode { Mode::White => "white-box", Mode::Grey => "greybox", Mode::Host => "host/infra", Mode::Ai => "ai/llm", Mode::Skills => "skills/n8n", Mode::Black => "black-box" };
|
||||
let target_s = cfg.target.clone();
|
||||
|
||||
// ---- terminal setup FIRST: on a non-TTY this errors before we spawn any
|
||||
@@ -163,6 +163,8 @@ pub async fn run(base: &Path, mut cfg: RunConfig, mcp: bool, mode: Mode) -> anyh
|
||||
Mode::White => harness::run_whitebox(cfg, &lib, &pool, tx).await,
|
||||
Mode::Grey => harness::run_greybox(cfg, &lib, &pool, tx).await,
|
||||
Mode::Host => harness::run_host(cfg, &lib, &pool, tx).await,
|
||||
Mode::Ai => harness::pipeline::run_ai(cfg, &lib, &pool, tx).await,
|
||||
Mode::Skills => harness::pipeline::run_skills_audit(cfg, &lib, &pool, tx).await,
|
||||
Mode::Black => harness::run(cfg, &lib, &pool, tx).await,
|
||||
}
|
||||
});
|
||||
|
||||
Reference in New Issue
Block a user