NeuroSploit v3.2 - Autonomous AI Penetration Testing Platform

116 modules | 100 vuln types | 18 API routes | 18 frontend pages

Major features:
- VulnEngine: 100 vuln types, 526+ payloads, 12 testers, anti-hallucination prompts
- Autonomous Agent: 3-stream auto pentest, multi-session (5 concurrent), pause/resume/stop
- CLI Agent: Claude Code / Gemini CLI / Codex CLI inside Kali containers
- Validation Pipeline: negative controls, proof of execution, confidence scoring, judge
- AI Reasoning: ReACT engine, token budget, endpoint classifier, CVE hunter, deep recon
- Multi-Agent: 5 specialists + orchestrator + researcher AI + vuln type agents
- RAG System: BM25/TF-IDF/ChromaDB vectorstore, few-shot, reasoning templates
- Smart Router: 20 providers (8 CLI OAuth + 12 API), tier failover, token refresh
- Kali Sandbox: container-per-scan, 56 tools, VPN support, on-demand install
- Full IA Testing: methodology-driven comprehensive pentest sessions
- Notifications: Discord, Telegram, WhatsApp/Twilio multi-channel alerts
- Frontend: React/TypeScript with 18 pages, real-time WebSocket updates

backend/config.py

@@ -0,0 +1,84 @@
+"""
+NeuroSploit v3 - Configuration
+"""
+import os
+from pathlib import Path
+from typing import Optional
+from pydantic_settings import BaseSettings
+
+
+class Settings(BaseSettings):
+    """Application settings"""
+
+    # Application
+    APP_NAME: str = "NeuroSploit v3"
+    APP_VERSION: str = "3.0.0"
+    DEBUG: bool = True
+
+    # Server
+    HOST: str = "0.0.0.0"
+    PORT: int = 8000
+
+    # Database
+    DATABASE_URL: str = "sqlite+aiosqlite:///./data/neurosploit.db"
+
+    # Paths
+    BASE_DIR: Path = Path(__file__).parent.parent
+    DATA_DIR: Path = BASE_DIR / "data"
+    REPORTS_DIR: Path = DATA_DIR / "reports"
+    SCANS_DIR: Path = DATA_DIR / "scans"
+    PROMPTS_DIR: Path = BASE_DIR / "prompts"
+
+    # LLM Settings
+    ANTHROPIC_API_KEY: Optional[str] = os.getenv("ANTHROPIC_API_KEY")
+    OPENAI_API_KEY: Optional[str] = os.getenv("OPENAI_API_KEY")
+    OPENROUTER_API_KEY: Optional[str] = os.getenv("OPENROUTER_API_KEY")
+    GEMINI_API_KEY: Optional[str] = os.getenv("GEMINI_API_KEY")
+    TOGETHER_API_KEY: Optional[str] = os.getenv("TOGETHER_API_KEY")
+    FIREWORKS_API_KEY: Optional[str] = os.getenv("FIREWORKS_API_KEY")
+    DEFAULT_LLM_PROVIDER: str = "claude"
+    DEFAULT_LLM_MODEL: str = "claude-sonnet-4-20250514"
+    MAX_OUTPUT_TOKENS: Optional[int] = None
+    ENABLE_MODEL_ROUTING: bool = False
+
+    # Feature Flags
+    ENABLE_KNOWLEDGE_AUGMENTATION: bool = False
+    ENABLE_BROWSER_VALIDATION: bool = False
+    ENABLE_VULN_AGENTS: bool = False
+    VULN_AGENT_CONCURRENCY: int = 10
+    ENABLE_SMART_ROUTER: bool = False
+
+    # RAG (Retrieval-Augmented Generation)
+    ENABLE_RAG: bool = True  # Enabled by default (zero deps, uses BM25)
+    RAG_BACKEND: str = "auto"  # "auto", "chromadb", "tfidf", "bm25"
+
+    # External Methodology File (injected into all LLM calls)
+    METHODOLOGY_FILE: Optional[str] = None  # Path to .md methodology file
+
+    # CLI Agent (AI CLI tools inside Kali sandbox)
+    ENABLE_CLI_AGENT: bool = False  # Feature flag (default: disabled)
+    CLI_AGENT_MAX_RUNTIME: int = 1800  # Max runtime in seconds (default: 30 min)
+    CLI_AGENT_DEFAULT_PROVIDER: str = "claude_code"  # Default CLI provider
+
+    # Codex LLM
+    CODEX_API_KEY: Optional[str] = os.getenv("CODEX_API_KEY")
+
+    # Scan Settings
+    MAX_CONCURRENT_SCANS: int = 5
+    DEFAULT_TIMEOUT: int = 30
+    MAX_REQUESTS_PER_SECOND: int = 10
+
+    # CORS
+    CORS_ORIGINS: list = ["http://localhost:3000", "http://127.0.0.1:3000"]
+
+    class Config:
+        env_file = ".env"
+        case_sensitive = True
+
+
+settings = Settings()
+
+# Ensure directories exist
+settings.DATA_DIR.mkdir(parents=True, exist_ok=True)
+settings.REPORTS_DIR.mkdir(parents=True, exist_ok=True)
+settings.SCANS_DIR.mkdir(parents=True, exist_ok=True)