v3.6.2: stream Codex tool-by-tool + capture agent commands in /logs & /status

- Drive `codex exec --json` and parse its JSONL event stream into the same
  categorized live feed as Claude Code (exec/edit/tool/net/tokens), so recon and
  exploitation are visible as each command runs instead of a silent black box.
- Fix the activity feed to keep per-agent tool events (commands, network, files,
  findings) and only filter model reasoning + token telemetry, so /logs shows the
  real command trail and /status 'last:' is a true sign-of-life.
- Surface failed internal commands as 'exec: (exit N)'; keep Codex auth/rate
  detection from stderr.
This commit is contained in:
CyberSecurityUP
2026-07-10 17:28:40 -03:00
parent 98616bca0b
commit ce31478068
15 changed files with 197 additions and 35 deletions
+11 -10
View File
@@ -1,4 +1,4 @@
<h1 align="center">🧠 NeuroSploit v3.6.1</h1>
<h1 align="center">🧠 NeuroSploit v3.6.2</h1>
<p align="center">
<a href="https://trendshift.io/repositories/22624?utm_source=trendshift-badge&amp;utm_medium=badge&amp;utm_campaign=badge-trendshift-22624" target="_blank" rel="noopener noreferrer"><img src="https://trendshift.io/api/badge/trendshift/repositories/22624/daily?language=Python" alt="JoasASantos%2FNeuroSploit | Trendshift" width="250" height="55"/></a>
@@ -12,7 +12,7 @@
</p>
<p align="center">
<img src="https://img.shields.io/badge/Version-3.6.1-blue?style=flat-square">
<img src="https://img.shields.io/badge/Version-3.6.2-blue?style=flat-square">
<img src="https://img.shields.io/badge/Harness-Rust%20%7C%20tokio-e6b673?style=flat-square">
<img src="https://img.shields.io/badge/License-MIT-green?style=flat-square">
<img src="https://img.shields.io/badge/MD%20Agents-417-red?style=flat-square">
@@ -28,14 +28,15 @@
>
> 📖 **New here? Read the [full Tutorial & User Guide →](TUTORIAL.md)** — every mode, flag, config and example explained.
> 🆕 **New in v3.6.1Cloud testing + REPL navigation + deeper recon:**
> **AWS/GCP/Azure** agents (+17 → **375** total) with credentials wired through
> `creds.yaml`; a more navigable **REPL** — **`/timeout`** idle guardrail,
> **multi-target** `/target a,b,c` (sequential), an interactive **`/results`**
> browser (target → vuln → detail, Esc to go back) and **`/report`** picker; and
> **deeper recon** that downloads & analyzes JavaScript (endpoints, secrets,
> source maps) and does request/response differential analysis. Interactive
> line-editing prompt bug fixed.
> 🆕 **New in v3.6.2live Codex streaming + full activity feed:**
> Codex runs now **stream tool-by-tool** (`codex exec --json`) exactly like
> Claude Code — every command, file edit, MCP call and token count appears live
> instead of a silent black box, so a long intense recon never looks frozen. The
> **`/logs`** feed and **`/status`** sign-of-line now capture the *actual
> commands each agent runs* (subfinder, httpx, nmap, curl…), not just pipeline
> phases. *(v3.6.1 added GPT-5.6 sol/terra/luna, the Codex exit-1 fix, `/logs`
> and richer `/status`; v3.6.0 added AI-agent/LLM/MCP/Skills/n8n testing +
> onboarding wizard + Cloud scope.)*
> *(v3.5.4 added robust attack chaining + false-positive reduction; v3.5.3
> GitHub/GitLab/Jira **[integrations](TUTORIAL-INTEGRATION.md)**; v3.5.2 the DEPTH
> doctrine + report-hygiene — see [RELEASE.md](RELEASE.md).)*